chondrosarcomatousReformable[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

chondrosarcomatousReformable.dll
Size

328KB
MD5

9f5b9054da26fd05c3c113a4d4d7ab8e
SHA1

cb8681d4911913261a994ba303cae2dcc5efee16
SHA256

148fdd4f32e74bbe2ac990fc9dfd46c5a23c9a22a6337384460d5ffb8e4ee63c
SHA512

0d79cfe45e737fc7ca16ee0487f5cb36c45faf98cf8d0052e085d6a76519ce164435918abaf4089d03f4ee2943d8f0136035bc55def932e3d66abe3bb21c68a2
SSDEEP

6144:6OQhhnQT1dUGQWv4PfP3n2WSyUnvPNN0a3Y1DfcaQFGMReiDeVjBBO6N2o4MqMMI:7UGQWv4PfP3n2WSyavPGsGSWBN2/qM9g

Score

1^/10

Malware Config

Signatures

Files

chondrosarcomatousReformable.dll
.dll windows x86

Password: sim_infected

b11955ce5edf8a3da0d7b7c7d9db1f36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer

Exports

Exports

R?0KernTable@icu_51@@QAE@ABVLETableReference@1@AAW4LEErrorCode@@@Z
R?0LEFontInstance@icu_51@@QAE@ABV01@@Z
R?0LEFontInstance@icu_51@@QAE@XZ
R?0LEGlyphStorage@icu_51@@QAE@ABV01@@Z
R?0LEGlyphStorage@icu_51@@QAE@XZ
R?0LEInsertionCallback@icu_51@@QAE@ABV01@@Z
R?0LEInsertionCallback@icu_51@@QAE@XZ
R?0LESwaps@icu_51@@AAE@XZ
R?0LayoutEngine@icu_51@@IAE@PBVLEFontInstance@1@HHHAAW4LEErrorCode@@@Z
R?0LayoutEngine@icu_51@@QAE@ABV01@@Z
R?0OpenTypeLayoutEngine@icu_51@@QAE@ABV01@@Z
R?0OpenTypeLayoutEngine@icu_51@@QAE@PBVLEFontInstance@1@HHHAAW4LEErrorCode@@@Z
R?0OpenTypeLayoutEngine@icu_51@@QAE@PBVLEFontInstance@1@HHHABV?$LEReferenceTo@UGlyphSubstitutionTableHeader@icu_51@@@1@AAW4LEErrorCode@@@Z
R?1KernTable@icu_51@@QAE@XZ
R?1LEFontInstance@icu_51@@UAE@XZ
R?1LEGlyphStorage@icu_51@@UAE@XZ
R?1LEInsertionCallback@icu_51@@UAE@XZ
R?1LayoutEngine@icu_51@@UAE@XZ
R?1OpenTypeLayoutEngine@icu_51@@UAE@XZ
R?4CanonShaping@icu_51@@QAEAAV01@ABV01@@Z
R?4LEFontInstance@icu_51@@QAEAAV01@ABV01@@Z
R?4LEGlyphStorage@icu_51@@QAEAAV01@ABV01@@Z
R?4LEInsertionCallback@icu_51@@QAEAAV01@ABV01@@Z
R?4LESwaps@icu_51@@QAEAAV01@ABV01@@Z
R?4LayoutEngine@icu_51@@QAEAAV01@ABV01@@Z
R?4OpenTypeLayoutEngine@icu_51@@QAEAAV01@ABV01@@Z
R?ALEGlyphStorage@icu_51@@QBEAAIH@Z
R?_7LEFontInstance@icu_51@@6B@
R?_7LEGlyphStorage@icu_51@@6BLEInsertionCallback@1@@
R?_7LEGlyphStorage@icu_51@@6BUObject@1@@
R?_7LEInsertionCallback@icu_51@@6B@
R?_7LayoutEngine@icu_51@@6B@
R?_7OpenTypeLayoutEngine@icu_51@@6B@
RadjustGlyphPositions@LayoutEngine@icu_51@@MAEXQB_WHHCAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RadjustGlyphPositions@OpenTypeLayoutEngine@icu_51@@MAEXQB_WHHCAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RadjustMarkGlyphs@LayoutEngine@icu_51@@KAXAAVLEGlyphStorage@2@PAVLEGlyphFilter@2@AAW4LEErrorCode@@@Z
RadjustMarkGlyphs@LayoutEngine@icu_51@@KAXQB_WHCAAVLEGlyphStorage@2@PAVLEGlyphFilter@2@AAW4LEErrorCode@@@Z
RadjustPosition@LEGlyphStorage@icu_51@@QAEXHMMAAW4LEErrorCode@@@Z
RadoptAuxDataArray@LEGlyphStorage@icu_51@@QAEXAAV12@@Z
RadoptCharIndicesArray@LEGlyphStorage@icu_51@@QAEXAAV12@@Z
RadoptGlyphArray@LEGlyphStorage@icu_51@@QAEXAAV12@@Z
RadoptGlyphCount@LEGlyphStorage@icu_51@@QAEXAAV12@@Z
RadoptGlyphCount@LEGlyphStorage@icu_51@@QAEXH@Z
RadoptPositionArray@LEGlyphStorage@icu_51@@QAEXAAV12@@Z
RallocateAuxData@LEGlyphStorage@icu_51@@QAEHAAW4LEErrorCode@@@Z
RallocateGlyphArray@LEGlyphStorage@icu_51@@QAEXHCAAW4LEErrorCode@@@Z
RallocatePositions@LEGlyphStorage@icu_51@@QAEHAAW4LEErrorCode@@@Z
RapplyInsertion@LEGlyphStorage@icu_51@@MAECHHQAI@Z
RapplyInsertions@LEGlyphStorage@icu_51@@QAEHXZ
RapplyTypoFlags@OpenTypeLayoutEngine@icu_51@@AAEXXZ
RcanDisplay@LEFontInstance@icu_51@@UBECH@Z
RcharacterProcessing@LayoutEngine@icu_51@@MAEHQB_WHHHCAAPA_WAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RcharacterProcessing@OpenTypeLayoutEngine@icu_51@@MAEHQB_WHHHCAAPA_WAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RcomputeGlyphs@LayoutEngine@icu_51@@MAEHQB_WHHHCAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RcomputeGlyphs@OpenTypeLayoutEngine@icu_51@@MAEHQB_WHHHCAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RfixedToFloat@LEFontInstance@icu_51@@SAMH@Z
RfloatToFixed@LEFontInstance@icu_51@@SAHM@Z
RgetAuxData@LEGlyphStorage@icu_51@@QBEIHAAW4LEErrorCode@@@Z
RgetAuxData@LEGlyphStorage@icu_51@@QBEXQAIAAW4LEErrorCode@@@Z
RgetCharIndex@LEGlyphStorage@icu_51@@QBEHHAAW4LEErrorCode@@@Z
RgetCharIndices@LEGlyphStorage@icu_51@@QBEXQAHAAW4LEErrorCode@@@Z
RgetCharIndices@LEGlyphStorage@icu_51@@QBEXQAHHAAW4LEErrorCode@@@Z
RgetCharIndices@LayoutEngine@icu_51@@QBEXQAHAAW4LEErrorCode@@@Z
RgetCharIndices@LayoutEngine@icu_51@@QBEXQAHHAAW4LEErrorCode@@@Z
RgetDynamicClassID@LEFontInstance@icu_51@@UBEPAXXZ
RgetDynamicClassID@LEGlyphStorage@icu_51@@UBEPAXXZ
RgetDynamicClassID@LayoutEngine@icu_51@@UBEPAXXZ
RgetDynamicClassID@OpenTypeLayoutEngine@icu_51@@UBEPAXXZ
RgetFontTable@LEFontInstance@icu_51@@UBEPBXIAAI@Z
RgetFontTable@LayoutEngine@icu_51@@MBEPBXI@Z
RgetFontTable@LayoutEngine@icu_51@@MBEPBXIAAI@Z
RgetGlyphCount@LEGlyphStorage@icu_51@@QBEHXZ
RgetGlyphCount@LayoutEngine@icu_51@@QBEHXZ
RgetGlyphID@LEGlyphStorage@icu_51@@QBEIHAAW4LEErrorCode@@@Z
RgetGlyphPosition@LEGlyphStorage@icu_51@@QBEXHAAM0AAW4LEErrorCode@@@Z
RgetGlyphPosition@LayoutEngine@icu_51@@QBEXHAAM0AAW4LEErrorCode@@@Z
RgetGlyphPositions@LEGlyphStorage@icu_51@@QBEXQAMAAW4LEErrorCode@@@Z
RgetGlyphPositions@LayoutEngine@icu_51@@QBEXQAMAAW4LEErrorCode@@@Z
RgetGlyphs@LEGlyphStorage@icu_51@@QBEXQAIAAW4LEErrorCode@@@Z
RgetGlyphs@LEGlyphStorage@icu_51@@QBEXQAIIAAW4LEErrorCode@@@Z
RgetGlyphs@LayoutEngine@icu_51@@QBEXQAIAAW4LEErrorCode@@@Z
RgetGlyphs@LayoutEngine@icu_51@@UBEXQAIIAAW4LEErrorCode@@@Z
RgetLangSysTag@OpenTypeLayoutEngine@icu_51@@SAIH@Z
RgetLineHeight@LEFontInstance@icu_51@@UBEHXZ
RgetScriptTag@OpenTypeLayoutEngine@icu_51@@SAIH@Z
RgetStaticClassID@LEFontInstance@icu_51@@SAPAXXZ
RgetStaticClassID@LEGlyphStorage@icu_51@@SAPAXXZ
RgetStaticClassID@LayoutEngine@icu_51@@SAPAXXZ
RgetStaticClassID@OpenTypeLayoutEngine@icu_51@@SAPAXXZ
RgetSubFont@LEFontInstance@icu_51@@UBEPBV12@QB_WPAHHHAAW4LEErrorCode@@@Z
RgetV2ScriptTag@OpenTypeLayoutEngine@icu_51@@SAIH@Z
RglyphDefinitionTable@CanonShaping@icu_51@@2QBEB
RglyphDefinitionTableLen@CanonShaping@icu_51@@2IB
RglyphPostProcessing@OpenTypeLayoutEngine@icu_51@@MAEHAAVLEGlyphStorage@2@0AAW4LEErrorCode@@@Z
RglyphProcessing@OpenTypeLayoutEngine@icu_51@@MAEHQB_WHHHCAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RglyphSubstitution@OpenTypeLayoutEngine@icu_51@@MAEHHHCAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RglyphSubstitutionTable@CanonShaping@icu_51@@2QBEB
RglyphSubstitutionTableLen@CanonShaping@icu_51@@2IB
RinsertGlyphs@LEGlyphStorage@icu_51@@QAEPAIHH@Z
RinsertGlyphs@LEGlyphStorage@icu_51@@QAEPAIHHAAW4LEErrorCode@@@Z
RkTypoFlagKern@LayoutEngine@icu_51@@2HB
RkTypoFlagLiga@LayoutEngine@icu_51@@2HB
RlanguageTags@OpenTypeLayoutEngine@icu_51@@2QBIB
RlayoutChars@LayoutEngine@icu_51@@UAEHQB_WHHHCMMAAW4LEErrorCode@@@Z
RlayoutEngineFactory@LayoutEngine@icu_51@@SAPAV12@PBVLEFontInstance@2@HHAAW4LEErrorCode@@@Z
RlayoutEngineFactory@LayoutEngine@icu_51@@SAPAV12@PBVLEFontInstance@2@HHHAAW4LEErrorCode@@@Z
RmapCharToGlyph@LEFontInstance@icu_51@@UBEIHPBVLECharMapper@2@@Z
RmapCharToGlyph@LEFontInstance@icu_51@@UBEIHPBVLECharMapper@2@C@Z
RmapCharsToGlyphs@LEFontInstance@icu_51@@UBEXQB_WHHCPBVLECharMapper@2@CAAVLEGlyphStorage@2@@Z
RmapCharsToGlyphs@LayoutEngine@icu_51@@MAEXQB_WHHCCAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RmoveGlyph@LEGlyphStorage@icu_51@@QAEXHHI@Z
RpixelsToUnits@LEFontInstance@icu_51@@UBEXAAULEPoint@@0@Z
RpositionGlyphs@LayoutEngine@icu_51@@MAEXAAVLEGlyphStorage@2@MMAAW4LEErrorCode@@@Z
Rprocess@KernTable@icu_51@@QAEXAAVLEGlyphStorage@2@AAW4LEErrorCode@@@Z
RreorderMarks@CanonShaping@icu_51@@SAXPB_WHCPA_WAAVLEGlyphStorage@2@@Z
Rreset@LEGlyphStorage@icu_51@@QAEXXZ
Rreset@LayoutEngine@icu_51@@UAEXXZ
Rreset@OpenTypeLayoutEngine@icu_51@@MAEXXZ
RscriptTags@OpenTypeLayoutEngine@icu_51@@0QBIB
RsetAuxData@LEGlyphStorage@icu_51@@QAEXHIAAW4LEErrorCode@@@Z
RsetCharIndex@LEGlyphStorage@icu_51@@QAEXHHAAW4LEErrorCode@@@Z
RsetGlyphID@LEGlyphStorage@icu_51@@QAEXHIAAW4LEErrorCode@@@Z
RsetPosition@LEGlyphStorage@icu_51@@QAEXHMMAAW4LEErrorCode@@@Z
RsetScriptAndLanguageTags@OpenTypeLayoutEngine@icu_51@@AAEXXZ
RsortMarks@CanonShaping@icu_51@@CAXPAHPBHHH@Z
RswapLong@LESwaps@icu_51@@SAII@Z
RswapWord@LESwaps@icu_51@@SAGG@Z
RtransformFunits@LEFontInstance@icu_51@@UBEXMMAAULEPoint@@@Z
RunitsToPoints@LEFontInstance@icu_51@@UBEXAAULEPoint@@0@Z
RxPixelsToUnits@LEFontInstance@icu_51@@UBEMM@Z
RxUnitsToPoints@LEFontInstance@icu_51@@UBEMM@Z
RyPixelsToUnits@LEFontInstance@icu_51@@UBEMM@Z
RyUnitsToPoints@LEFontInstance@icu_51@@UBEMM@Z
Re_close_51
Re_create_51
Re_getCharIndicesWithBase_51
Re_getCharIndices_51
Re_getGlyphCount_51
Re_getGlyphPosition_51
Re_getGlyphPositions_51
Re_getGlyphs_51
Re_layoutChars_51
XS88

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: sim_infected

b11955ce5edf8a3da0d7b7c7d9db1f36

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 105KB

.rdata Size: 93KB - Virtual size: 92KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 112KB - Virtual size: 108KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 105KB - Virtual size: 105KB

.rdata
Size: 93KB - Virtual size: 92KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 112KB - Virtual size: 108KB

.reloc
Size: 5KB - Virtual size: 5KB