Stipulatory[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Stipulatory.dll
Size

430KB
MD5

942e1d6be5dd22b99f849ad4b8ea55df
SHA1

a6c469820d8e39fab3c510f793325cd56f872a4d
SHA256

4e59dd4f4908bb6694690094cefff6881ffae37f59ba031ed2734b00c0cd7aa7
SHA512

ec119c71aca47353c70dff5a6616c2ba30286b5a8d564838216a95f0108f46788f84e41f2a7777fd45bdc1d08de8482a753585ea6d450aee96b0a7168ac18c59
SSDEEP

6144:SJw5P0mR1bHI01t/LW3w7RUw50j6fsI+0YC5h39bOcEq7d67oYOftL+t0W4/Ks:UwVvBW3xwds0fVbN1A7oYOft6t0Wk

Score

1^/10

Malware Config

Signatures

Files

Stipulatory.dll
.dll windows x86

8fc8d2aeb26153e5af5a4b8dcc7deaa0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileMappingA
DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetFileAttributesExA
GetFullPathNameA
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemWindowsDirectoryA
GetTempPathA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
Sleep
UnmapViewOfFile
WideCharToMultiByte

Exports

Exports

RcAtomicCreate
RcAtomicDeleteNew
RcAtomicDestroy
RcAtomicLock
RcAtomicNewFile
RcAtomicOrigFile
RcAtomicReplaceOrig
RcAtomicUnlock
RcBlanksAdd
RcBlanksCreate
RcBlanksDestroy
RcBlanksIsMember
RcCacheCopySet
RcCacheDir
RcCacheNumFont
RcCacheNumSubdir
RcCacheSubdir
RcCharSetAddChar
RcCharSetCopy
RcCharSetCount
RcCharSetCoverage
RcCharSetCreate
RcCharSetDestroy
RcCharSetEqual
RcCharSetFirstPage
RcCharSetHasChar
RcCharSetIntersect
RcCharSetIntersectCount
RcCharSetIsSubset
RcCharSetMerge
RcCharSetNew
RcCharSetNextPage
RcCharSetSubtract
RcCharSetSubtractCount
RcCharSetUnion
RcConfigAppFontAddDir
RcConfigAppFontAddFile
RcConfigAppFontClear
RcConfigBuildFonts
RcConfigCreate
RcConfigDestroy
RcConfigEnableHome
RcConfigFilename
RcConfigGetBlanks
RcConfigGetCache
RcConfigGetCacheDirs
RcConfigGetConfigDirs
RcConfigGetConfigFiles
RcConfigGetCurrent
RcConfigGetFontDirs
RcConfigGetFonts
RcConfigGetRescanInterval
RcConfigGetRescanInverval
RcConfigHome
RcConfigParseAndLoad
RcConfigReference
RcConfigSetCurrent
RcConfigSetRescanInterval
RcConfigSetRescanInverval
RcConfigSubstitute
RcConfigSubstituteWithPat
RcConfigUptoDate
RcDefaultSubstitute
RcDirCacheLoad
RcDirCacheLoadFile
RcDirCacheRead
RcDirCacheUnlink
RcDirCacheUnload
RcDirCacheValid
RcDirSave
RcDirScan
RcFileIsDir
RcFileScan
RcFini
RcFontList
RcFontMatch
RcFontRenderPrepare
RcFontSetAdd
RcFontSetCreate
RcFontSetDestroy
RcFontSetList
RcFontSetMatch
RcFontSetPrint
RcFontSetSort
RcFontSetSortDestroy
RcFontSort
RcFreeTypeCharIndex
RcFreeTypeCharSet
RcFreeTypeCharSetAndSpacing
RcFreeTypeQuery
RcFreeTypeQueryFace
RcGetLangs
RcGetVersion
RcInit
RcInitBringUptoDate
RcInitLoadConfig
RcInitLoadConfigAndFonts
RcInitReinitialize
RcLangGetCharSet
RcLangSetAdd
RcLangSetCompare
RcLangSetContains
RcLangSetCopy
RcLangSetCreate
RcLangSetDestroy
RcLangSetEqual
RcLangSetGetLangs
RcLangSetHasLang
RcLangSetHash
RcMatrixCopy
RcMatrixEqual
RcMatrixMultiply
RcMatrixRotate
RcMatrixScale
RcMatrixShear
RcNameConstant
RcNameGetConstant
RcNameGetObjectType
RcNameParse
RcNameRegisterConstants
RcNameRegisterObjectTypes
RcNameUnparse
RcNameUnregisterConstants
RcNameUnregisterObjectTypes
RcObjectSetAdd
RcObjectSetBuild
RcObjectSetCreate
RcObjectSetDestroy
RcObjectSetVaBuild
RcPatternAdd
RcPatternAddBool
RcPatternAddCharSet
RcPatternAddDouble
RcPatternAddFTFace
RcPatternAddInteger
RcPatternAddLangSet
RcPatternAddMatrix
RcPatternAddString
RcPatternAddWeak
RcPatternBuild
RcPatternCreate
RcPatternDel
RcPatternDestroy
RcPatternDuplicate
RcPatternEqual
RcPatternEqualSubset
RcPatternFilter
RcPatternFormat
RcPatternGet
RcPatternGetBool
RcPatternGetCharSet
RcPatternGetDouble
RcPatternGetFTFace
RcPatternGetInteger
RcPatternGetLangSet
RcPatternGetMatrix
RcPatternGetString
RcPatternHash
RcPatternPrint
RcPatternReference
RcPatternRemove
RcPatternVaBuild
RcStrBasename
RcStrCmp
RcStrCmpIgnoreCase
RcStrCopy
RcStrCopyFilename
RcStrDirname
RcStrDowncase
RcStrFree
RcStrListCreate
RcStrListDone
RcStrListNext
RcStrPlus
RcStrSetAdd
RcStrSetAddFilename
RcStrSetCreate
RcStrSetDel
RcStrSetDestroy
RcStrSetEqual
RcStrSetMember
RcStrStr
RcStrStrIgnoreCase
RcUcs4ToUtf8
RcUtf16Len
RcUtf16ToUcs4
RcUtf8Len
RcUtf8ToUcs4
RcValueDestroy
RcValueEqual
RcValuePrint
WW50

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 512B - Virtual size: 160B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 512B - Virtual size: 222B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/83
Size: 512B - Virtual size: 216B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/96
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/107
Size: 512B - Virtual size: 336B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fc8d2aeb26153e5af5a4b8dcc7deaa0

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 128KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 56KB - Virtual size: 56KB

/4 Size: 512B - Virtual size: 172B

.bss Size: - Virtual size: 3KB

.edata Size: 5KB - Virtual size: 5KB

.idata Size: 3KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 4KB

/14 Size: 512B - Virtual size: 160B

/29 Size: 512B - Virtual size: 222B

/45 Size: 6KB - Virtual size: 5KB

/57 Size: 2KB - Virtual size: 1KB

/71 Size: 1KB - Virtual size: 1KB

/83 Size: 512B - Virtual size: 216B

/96 Size: 144KB - Virtual size: 143KB

/107 Size: 512B - Virtual size: 336B

.text
Size: 128KB - Virtual size: 128KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 56KB - Virtual size: 56KB

/4
Size: 512B - Virtual size: 172B

.bss
Size: - Virtual size: 3KB

.edata
Size: 5KB - Virtual size: 5KB

.idata
Size: 3KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 4KB

/14
Size: 512B - Virtual size: 160B

/29
Size: 512B - Virtual size: 222B

/45
Size: 6KB - Virtual size: 5KB

/57
Size: 2KB - Virtual size: 1KB

/71
Size: 1KB - Virtual size: 1KB

/83
Size: 512B - Virtual size: 216B

/96
Size: 144KB - Virtual size: 143KB

/107
Size: 512B - Virtual size: 336B