THREED32[.]DLL

Sharing

Copy URL Twitter E-mail

General

Target

THREED32.DLL
Size

196KB
MD5

51c9e8d775c6653acf5d87bdb2ebd33e
SHA1

74eb5f6a08b77c819bc53a0a5054877964d78ade
SHA256

8f317a229950e0393ab10e12554fd2c6be5b9496ffb5302ee6c24f567c944a34
SHA512

dd58b2f89fd7a589a4d33693d247cbb80732c29bd1b0fc0e982f992fa1dedc9833d0b509ce941e2182fb8566e4d90711525d36fa0b215a70b4b4e54fa2035bd0
SSDEEP

3072:xn4eEM1uJBsXhSlqR4edEUEnU/fX55fpxgevBusygw7uDXY2FLWTU+mqIg:R4DM1u/uhh4edEUEU0CBusyluLHa

Score

1^/10

Malware Config

Signatures

Files

THREED32.DLL
.dll regsvr32 windows x86

d5f09a42b36ef8ed87b0317650ba47a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc40

ord2815
ord5279
ord2728
ord5461
ord3320
ord5352
ord5301
ord2801
ord5299
ord2792
ord4863
ord2183
ord1633
ord3738
ord2176
ord2358
ord1043
ord1071
ord974
ord2135
ord1464
ord4973
ord881
ord3827
ord4154
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4133
ord4132
ord4360
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4122
ord4156
ord4473
ord4127
ord4117
ord4111
ord4110
ord4060
ord3854
ord3844
ord3840
ord4202
ord4204
ord4201
ord4079
ord4459
ord3898
ord4432
ord2177
ord2963
ord5363
ord1540
ord5643
ord4704
ord3922
ord2618
ord2755
ord2844
ord3946
ord2851
ord2621
ord2695
ord3581
ord4098
ord5160
ord632
ord665
ord3452
ord426
ord381
ord3530
ord1394
ord1868
ord4737
ord267
ord4740
ord4724
ord3523
ord2223
ord2378
ord1359
ord706
ord1391
ord4403
ord2227
ord3185
ord3110
ord3158
ord569
ord2106
ord2115
ord5121
ord1426
ord1425
ord2635
ord314
ord3010
ord1400
ord5341
ord1456
ord3049
ord3919
ord1539
ord4296
ord4685
ord570
ord4444
ord2004
ord421
ord760
ord3524
ord4505
ord486
ord4123
ord4241
ord2451
ord2510
ord5129
ord2536
ord3873
ord4203
ord4198
ord4228
ord4999
ord3098
ord2795
ord5241
ord4465
ord4124
ord4435
ord762
ord2007
ord1975
ord2072
ord1995
ord5200
ord2548
ord3892
ord4735
ord2747
ord3862
ord2515
ord4219
ord4223
ord729
ord5568
ord2081
ord2312
ord2317
ord4736
ord5416
ord1366
ord4728
ord4742
ord483
ord5647
ord4694
ord2845
ord4101
ord3134
ord315
ord3724
ord2707
ord3630
ord3784
ord5139
ord3786
ord4173
ord2001
ord4448
ord4206
ord5296
ord1014
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4715
ord2389
ord3579
ord4165
ord4719
ord4703
ord5053
ord3458
ord2960
ord3192
ord721
ord504
ord5630
ord1075
ord1085
ord1097
ord1647
ord406
ord3714
ord5370
ord3656
ord3028
ord4462
ord615
ord362
ord810
ord4952
ord3684
ord5550
ord978
ord979
ord5638
ord2894
ord5637
ord265
ord3314
ord4700
ord3837
ord5644
ord4608
ord2086
ord4657
ord3890
ord1989
ord2064
ord1986
ord654
ord3907
ord4099
ord2861
ord4691
ord1850
ord2140
ord4677
ord1494
ord4510
ord3268
ord5649
ord1785
ord2323
ord1786
ord2557
ord2199
ord3578
ord5360
ord4312
ord4176
ord4450
ord4302
ord3859
ord4681
ord1035
ord4046
ord1084
ord403
ord1073
ord731
ord3906
ord651
ord3202
ord2694
ord4096
ord3580
ord3345
ord3340
ord3346
ord2620
ord2916
ord2696
ord3945
ord2860
ord2744
ord2617
ord2843
ord2754
ord5389
ord3952
ord4649
ord3335
ord4248
ord711
ord671
ord733
ord269
ord1370
ord988
ord5681
ord1367
ord1046
ord328
ord1042
ord1369
ord1105
ord1000
ord999

msvcrt40

__dllonexit
__CxxFrameHandler
wcslen
_mbsrev
_EH_prolog
_onexit
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv

kernel32

GetVersion
Sleep
LocalAlloc
LocalFree
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
GetPrivateProfileStringA
lstrcpyA
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
lstrcmpiA
lstrcmpA
lstrlenA

user32

DrawFocusRect
SetRectEmpty
GetClientRect
PtInRect
InvertRect
CreateAcceleratorTableA
ShowWindow
IsWindowVisible
CopyRect
EnableWindow
SetPropA
OffsetRect
DrawTextA
GetCapture
GetPropA
GetWindow
wsprintfA
GetParent
ScreenToClient
GetWindowRect
PostMessageA
ClientToScreen
GetDlgItem
MoveWindow
GrayStringA
GetSysColor
GetCursorPos
DestroyCursor
SetCursor
LoadCursorA
UpdateWindow
ReleaseCapture
VkKeyScanA
CharNextA
CharUpperA
GetDC
ReleaseDC
WinHelpA
GetTabbedTextExtentA
LoadBitmapA
GetSystemMetrics
SetWindowTextA
FillRect
SendMessageA
IsWindow

gdi32

DeleteObject
CreateRectRgn
SaveDC
SelectClipRgn
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
SelectObject
ExcludeClipRect
CreateDCA
SelectPalette
RealizePalette
GetTextMetricsA
SetTextColor
GetStockObject
SetBkMode
DeleteDC
CreateCompatibleBitmap
CreateSolidBrush
FillRgn
CombineRgn
CreateRectRgnIndirect
Ellipse
CreatePen
CreateEllipticRgnIndirect
GetTextExtentPointA
LPtoDP
GetPixel
SetBkColor
LineTo
GetTextColor
GetNearestColor
SetPixel
MoveToEx
BitBlt
CreateFontIndirectA
StretchBlt
StretchDIBits
GetDIBits
GetSystemPaletteEntries
RestoreDC
CreateICA
EnumFontFamiliesA
GetObjectA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA

ole32

CoTaskMemFree

oleaut32

LoadTypeLi
SysStringLen
SysReAllocStringLen
SysFreeString
VariantChangeType
VariantInit
SysAllocString
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GrayStringCallback

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5f09a42b36ef8ed87b0317650ba47a4

Headers

File Characteristics

Imports

mfc40

msvcrt40

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 91KB - Virtual size: 91KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 6KB - Virtual size: 11KB

.idata Size: 6KB - Virtual size: 5KB

.rsrc Size: 52KB - Virtual size: 52KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 91KB - Virtual size: 91KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 6KB - Virtual size: 11KB

.idata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 52KB - Virtual size: 52KB

.reloc
Size: 12KB - Virtual size: 12KB