NonfactiousUnbale[.]dll

Resubmissions

22/03/2023, 02:42

230322-c685lagd9v 3

21/03/2023, 19:07

230321-xsswnsef21 1

21/03/2023, 17:28

230321-v1zyvacc25 3

Sharing

Copy URL Twitter E-mail

General

Target

NonfactiousUnbale.dll
Size

424KB
MD5

dd16d50ffc4586d92140268a6f8743da
SHA1

6a20224214b1bdd48f14aba1c40b485e50cb3e3a
SHA256

b1c429f67478263f0e896755c6866dd7804c508a1589d22b9fb148520b38c81a
SHA512

79b03a26146ee3f7956ad380f85d17379ddbd448f60fa91ef1890371d511de5d010b08077b381ec5c6ee1aa6314fef22567d03966e7661bbe3d338105f97d27d
SSDEEP

6144:dJw5P0mR1bHI01J/LW3w7RUw50j6fbnFNr/GwgSMsn5HIQ/bSBBMxM6Qb:7wVv1W3xwdbn3rHgGO8SLT6

Score

1^/10

Malware Config

Signatures

Files

NonfactiousUnbale.dll
.dll windows x86

8fc8d2aeb26153e5af5a4b8dcc7deaa0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileMappingA
DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetFileAttributesExA
GetFullPathNameA
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemWindowsDirectoryA
GetTempPathA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
Sleep
UnmapViewOfFile
WideCharToMultiByte

Exports

Exports

BcAtomicCreate
BcAtomicDeleteNew
BcAtomicDestroy
BcAtomicLock
BcAtomicNewFile
BcAtomicOrigFile
BcAtomicReplaceOrig
BcAtomicUnlock
BcBlanksAdd
BcBlanksCreate
BcBlanksDestroy
BcBlanksIsMember
BcCacheCopySet
BcCacheDir
BcCacheNumFont
BcCacheNumSubdir
BcCacheSubdir
BcCharSetAddChar
BcCharSetCopy
BcCharSetCount
BcCharSetCoverage
BcCharSetCreate
BcCharSetDestroy
BcCharSetEqual
BcCharSetFirstPage
BcCharSetHasChar
BcCharSetIntersect
BcCharSetIntersectCount
BcCharSetIsSubset
BcCharSetMerge
BcCharSetNew
BcCharSetNextPage
BcCharSetSubtract
BcCharSetSubtractCount
BcCharSetUnion
BcConfigAppFontAddDir
BcConfigAppFontAddFile
BcConfigAppFontClear
BcConfigBuildFonts
BcConfigCreate
BcConfigDestroy
BcConfigEnableHome
BcConfigFilename
BcConfigGetBlanks
BcConfigGetCache
BcConfigGetCacheDirs
BcConfigGetConfigDirs
BcConfigGetConfigFiles
BcConfigGetCurrent
BcConfigGetFontDirs
BcConfigGetFonts
BcConfigGetRescanInterval
BcConfigGetRescanInverval
BcConfigHome
BcConfigParseAndLoad
BcConfigReference
BcConfigSetCurrent
BcConfigSetRescanInterval
BcConfigSetRescanInverval
BcConfigSubstitute
BcConfigSubstituteWithPat
BcConfigUptoDate
BcDefaultSubstitute
BcDirCacheLoad
BcDirCacheLoadFile
BcDirCacheRead
BcDirCacheUnlink
BcDirCacheUnload
BcDirCacheValid
BcDirSave
BcDirScan
BcFileIsDir
BcFileScan
BcFini
BcFontList
BcFontMatch
BcFontRenderPrepare
BcFontSetAdd
BcFontSetCreate
BcFontSetDestroy
BcFontSetList
BcFontSetMatch
BcFontSetPrint
BcFontSetSort
BcFontSetSortDestroy
BcFontSort
BcFreeTypeCharIndex
BcFreeTypeCharSet
BcFreeTypeCharSetAndSpacing
BcFreeTypeQuery
BcFreeTypeQueryFace
BcGetLangs
BcGetVersion
BcInit
BcInitBringUptoDate
BcInitLoadConfig
BcInitLoadConfigAndFonts
BcInitReinitialize
BcLangGetCharSet
BcLangSetAdd
BcLangSetCompare
BcLangSetContains
BcLangSetCopy
BcLangSetCreate
BcLangSetDestroy
BcLangSetEqual
BcLangSetGetLangs
BcLangSetHasLang
BcLangSetHash
BcMatrixCopy
BcMatrixEqual
BcMatrixMultiply
BcMatrixRotate
BcMatrixScale
BcMatrixShear
BcNameConstant
BcNameGetConstant
BcNameGetObjectType
BcNameParse
BcNameRegisterConstants
BcNameRegisterObjectTypes
BcNameUnparse
BcNameUnregisterConstants
BcNameUnregisterObjectTypes
BcObjectSetAdd
BcObjectSetBuild
BcObjectSetCreate
BcObjectSetDestroy
BcObjectSetVaBuild
BcPatternAdd
BcPatternAddBool
BcPatternAddCharSet
BcPatternAddDouble
BcPatternAddFTFace
BcPatternAddInteger
BcPatternAddLangSet
BcPatternAddMatrix
BcPatternAddString
BcPatternAddWeak
BcPatternBuild
BcPatternCreate
BcPatternDel
BcPatternDestroy
BcPatternDuplicate
BcPatternEqual
BcPatternEqualSubset
BcPatternFilter
BcPatternFormat
BcPatternGet
BcPatternGetBool
BcPatternGetCharSet
BcPatternGetDouble
BcPatternGetFTFace
BcPatternGetInteger
BcPatternGetLangSet
BcPatternGetMatrix
BcPatternGetString
BcPatternHash
BcPatternPrint
BcPatternReference
BcPatternRemove
BcPatternVaBuild
BcStrBasename
BcStrCmp
BcStrCmpIgnoreCase
BcStrCopy
BcStrCopyFilename
BcStrDirname
BcStrDowncase
BcStrFree
BcStrListCreate
BcStrListDone
BcStrListNext
BcStrPlus
BcStrSetAdd
BcStrSetAddFilename
BcStrSetCreate
BcStrSetDel
BcStrSetDestroy
BcStrSetEqual
BcStrSetMember
BcStrStr
BcStrStrIgnoreCase
BcUcs4ToUtf8
BcUtf16Len
BcUtf16ToUcs4
BcUtf8Len
BcUtf8ToUcs4
BcValueDestroy
BcValueEqual
BcValuePrint
GL70

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 512B - Virtual size: 160B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 512B - Virtual size: 222B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/83
Size: 512B - Virtual size: 216B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/96
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/107
Size: 512B - Virtual size: 336B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

8fc8d2aeb26153e5af5a4b8dcc7deaa0

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 128KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 56KB - Virtual size: 56KB

/4 Size: 512B - Virtual size: 172B

.bss Size: - Virtual size: 3KB

.edata Size: 5KB - Virtual size: 5KB

.idata Size: 3KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 4KB

/14 Size: 512B - Virtual size: 160B

/29 Size: 512B - Virtual size: 222B

/45 Size: 6KB - Virtual size: 5KB

/57 Size: 2KB - Virtual size: 1KB

/71 Size: 1KB - Virtual size: 1KB

/83 Size: 512B - Virtual size: 216B

/96 Size: 152KB - Virtual size: 149KB

/107 Size: 512B - Virtual size: 336B

.text
Size: 128KB - Virtual size: 128KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 56KB - Virtual size: 56KB

/4
Size: 512B - Virtual size: 172B

.bss
Size: - Virtual size: 3KB

.edata
Size: 5KB - Virtual size: 5KB

.idata
Size: 3KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 4KB

/14
Size: 512B - Virtual size: 160B

/29
Size: 512B - Virtual size: 222B

/45
Size: 6KB - Virtual size: 5KB

/57
Size: 2KB - Virtual size: 1KB

/71
Size: 1KB - Virtual size: 1KB

/83
Size: 512B - Virtual size: 216B

/96
Size: 152KB - Virtual size: 149KB

/107
Size: 512B - Virtual size: 336B