zmods_twitch[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

zmods_twitch.dll
Size

1.2MB
MD5

3b1a6a29073de849cb04b3d7b815ea73
SHA1

d840caa9e8969c8a326073132a1d45079da15390
SHA256

65cadd966b0d98d75900b115402b57475e76ca70c762050152866d7350fb8601
SHA512

0df24c53f2bb72246acd090f55dae1ad71cfe3415f87d6f6ef935aba54a0f3d1ef0e0c755a4a0daf3a863bae5071aba87b11f6df057836c5f81135324d25a76e
SSDEEP

12288:R7V8yqrCfPsloP2JaA88skvHclnu7iFLr3kuZmaFuk8fPlfTagS2ZjXhySKYih14:isW2Lr3kukr3Plfi4jXYbYBtSQI9

Score

1^/10

Malware Config

Signatures

Files

zmods_twitch.dll
.dll windows x86

cfcd27852ec8c64ce6bacc0ac81b419e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

bcrypt

BCryptGenRandom

ntdll

RtlCaptureContext
RtlNtStatusToDosError
NtCancelIoFileEx
NtDeviceIoControlFile
NtCreateFile

advapi32

CryptReleaseContext

crypt32

CryptAcquireCertificatePrivateKey
PFXImportCertStore
CertDuplicateCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertDuplicateCertificateContext
CertOpenStore
CertCreateCertificateContext
CertCloseStore
CertFreeCertificateContext
CertAddCertificateContextToStore
CertDuplicateStore
CertEnumCertificatesInStore
CertGetCertificateChain

kernel32

InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
SetThreadStackGuarantee
DisableThreadLibraryCalls
HeapFree
GetProcessHeap
HeapAlloc
CloseHandle
GetLastError
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
HeapReAlloc
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
GetQueuedCompletionStatusEx
CreateIoCompletionPort
SetFileCompletionNotificationModes
TryAcquireSRWLockExclusive
SetLastError
GetFinalPathNameByHandleW
Sleep
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsSetValue
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
CreateMutexA
ReleaseMutex
GetEnvironmentVariableW
GetModuleHandleW
FormatMessageW
GetFileInformationByHandle
DeviceIoControl
SetFilePointerEx
ReadFile
GetFullPathNameW
CreateFileW
GetStdHandle
GetConsoleMode
WriteFile
WriteConsoleW
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentDirectoryW
GetCurrentThread
AcquireSRWLockShared
ReleaseSRWLockShared
TerminateProcess
SetHandleInformation
CreateThread
PostQueuedCompletionStatus
WaitForSingleObject
GetCurrentThreadId
GetCurrentProcessId

ncrypt

NCryptFreeObject

secur32

DeleteSecurityContext
AcquireCredentialsHandleA
InitializeSecurityContextW
FreeContextBuffer
AcceptSecurityContext
QueryContextAttributesW
DecryptMessage
EncryptMessage
FreeCredentialsHandle

ws2_32

WSACleanup
WSASocketW
bind
recv
send
freeaddrinfo
getaddrinfo
WSASend
getsockopt
WSAGetLastError
WSAIoctl
WSAStartup
connect
ioctlsocket
socket
closesocket

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
_CxxThrowException
memset
memcmp
memmove
memcpy
__CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_configure_narrow_argv
_initterm_e
_cexit
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

init
last_message
rust_eh_personality

Sections

.text
Size: 592KB - Virtual size: 592KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 590KB - Virtual size: 589KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfcd27852ec8c64ce6bacc0ac81b419e

Headers

DLL Characteristics

File Characteristics

Imports

bcrypt

ntdll

advapi32

crypt32

kernel32

ncrypt

secur32

ws2_32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 592KB - Virtual size: 592KB

.rdata Size: 590KB - Virtual size: 589KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 624B

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 592KB - Virtual size: 592KB

.rdata
Size: 590KB - Virtual size: 589KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 624B

.reloc
Size: 24KB - Virtual size: 23KB