SDL[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

SDL.dll
Size

300KB
MD5

1ae242c4b94cb03756a1288122a66faf
SHA1

5e2190a7e559aa04835f0d18152b279391f0a9a6
SHA256

d66ca8bd5ddee80b3b4d1544d9d515fa42c2d0a6761dca88f1c27ddc77a69776
SHA512

d4965a32cd829d2d8836a436ce0f819be175fd8beef6efecf6ea2700786dc8548a5afb2ea19e65e4e53d255c8fc511525ffcc87fa0dbcfa6e19ce463a0168725
SSDEEP

6144:wCFi3qyP61BVtlku+trajuRAXXSJavIetVALsH:nkPcku+trbanL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SDL.dll

Files

SDL.dll
.dll windows x64

b645ab219f17ed680cc2e0c76b9cab08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
mciSendCommandA
mciGetErrorStringA
joyGetPosEx
joyGetNumDevs
joyGetDevCapsA
timeSetEvent
timeKillEvent
waveOutGetErrorTextA

kernel32

CreateFileW
ReadFile
SetFilePointer
WriteFile
SetErrorMode
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CreateFileA
GetEnvironmentVariableA
SetEnvironmentVariableA
ReleaseMutex
CreateMutexA
CreateThread
GetCurrentThreadId
TerminateThread
QueryPerformanceCounter
Sleep
GetModuleHandleA
CreateEventA
GetDriveTypeA
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
CreateSemaphoreA
SetThreadPriority
GetCurrentThread
WaitForSingleObject
ReleaseSemaphore
CloseHandle
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
FormatMessageA

user32

ClipCursor
ClientToScreen
MapWindowPoints
WindowFromPoint
PtInRect
GetWindowLongA
LoadImageA
ChangeDisplaySettingsA
GetSystemMetrics
SetCursorPos
GetCursor
ScreenToClient
GetWindowLongPtrA
CreateCursor
DestroyCursor
SetWindowTextA
SetClassLongPtrA
CreateIconFromResourceEx
CreateWindowExA
DestroyWindow
GetDC
ReleaseDC
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
GetKeyboardLayout
GetMessageA
CallWindowProcA
GetKeyState
GetKeyboardState
ToUnicode
MapVirtualKeyExA
SetWindowLongPtrA
SetWindowPos
SetForegroundWindow
InvalidateRect
AdjustWindowRectEx
SetWindowLongA
GetParent
DestroyIcon
EnumDisplaySettingsA
MapVirtualKeyA
MsgWaitForMultipleObjects
GetForegroundWindow
GetCursorPos
SetCursor
GetWindowRect
GetClientRect
EndPaint
BeginPaint
GetMenu
KillTimer
SetTimer
ReleaseCapture
SetCapture
SetFocus
IsZoomed
ShowWindow
GetClassInfoA
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
GetDesktopWindow
AdjustWindowRect

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePalette
SwapBuffers
DeleteObject
GetDIBits
GetSystemPaletteEntries
GetSystemPaletteUse
SetPixelFormat
DescribePixelFormat
DeleteDC
RealizePalette
SelectObject
SelectPalette
SetPaletteEntries
SetSystemPaletteUse
CreateDIBSection
SetDIBColorTable
UnrealizeObject
GetDeviceGammaRamp
SetDeviceGammaRamp
GetDeviceCaps
ChoosePixelFormat

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

vcruntime140

memmove
__std_type_info_destroy_list
__C_specific_handler
__telemetry_main_return_trigger
memset
memcpy
strchr
memcmp
strstr
__telemetry_main_invoke_trigger

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsscanf
fwrite
fclose
ftell
fseek
fread
ferror

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc

api-ms-win-crt-convert-l1-1-0

atoi
_ltoa
_ultoa
atof

api-ms-win-crt-string-l1-1-0

isdigit
_stricmp
_strrev
strncmp
_strlwr

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
signal
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
raise
_endthreadex

api-ms-win-crt-math-l1-1-0

log
pow

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

SDL_AddTimer
SDL_AllocRW
SDL_AudioDriverName
SDL_AudioInit
SDL_AudioQuit
SDL_BuildAudioCVT
SDL_CDClose
SDL_CDEject
SDL_CDName
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlay
SDL_CDPlayTracks
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_ClearError
SDL_CloseAudio
SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_ConvertAudio
SDL_ConvertSurface
SDL_CreateCond
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateSemaphore
SDL_CreateThread
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroySemaphore
SDL_DisplayFormat
SDL_DisplayFormatAlpha
SDL_DisplayYUVOverlay
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_Error
SDL_EventState
SDL_FillRect
SDL_Flip
SDL_FreeCursor
SDL_FreeRW
SDL_FreeSurface
SDL_FreeWAV
SDL_FreeYUVOverlay
SDL_GL_GetAttribute
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_Lock
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GL_Unlock
SDL_GL_UpdateRects
SDL_GetAppState
SDL_GetAudioStatus
SDL_GetClipRect
SDL_GetCursor
SDL_GetError
SDL_GetEventFilter
SDL_GetGammaRamp
SDL_GetKeyName
SDL_GetKeyRepeat
SDL_GetKeyState
SDL_GetModState
SDL_GetMouseState
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseState
SDL_GetThreadID
SDL_GetTicks
SDL_GetVideoInfo
SDL_GetVideoSurface
SDL_GetWMInfo
SDL_Has3DNow
SDL_Has3DNowExt
SDL_HasAltiVec
SDL_HasMMX
SDL_HasMMXExt
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_Init
SDL_InitSubSystem
SDL_JoystickClose
SDL_JoystickEventState
SDL_JoystickGetAxis
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetHat
SDL_JoystickIndex
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickOpened
SDL_JoystickUpdate
SDL_KillThread
SDL_Linked_Version
SDL_ListModes
SDL_LoadBMP_RW
SDL_LoadFunction
SDL_LoadObject
SDL_LoadWAV_RW
SDL_LockAudio
SDL_LockSurface
SDL_LockYUVOverlay
SDL_LowerBlit
SDL_MapRGB
SDL_MapRGBA
SDL_MixAudio
SDL_NumJoysticks
SDL_OpenAudio
SDL_PauseAudio
SDL_PeepEvents
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64
SDL_ReadLE16
SDL_ReadLE32
SDL_ReadLE64
SDL_RegisterApp
SDL_RemoveTimer
SDL_SaveBMP_RW
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SetAlpha
SDL_SetClipRect
SDL_SetColorKey
SDL_SetColors
SDL_SetCursor
SDL_SetError
SDL_SetEventFilter
SDL_SetGamma
SDL_SetGammaRamp
SDL_SetModState
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetTimer
SDL_SetVideoMode
SDL_ShowCursor
SDL_SoftStretch
SDL_ThreadID
SDL_UnloadObject
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UnlockYUVOverlay
SDL_UnregisterApp
SDL_UpdateRect
SDL_UpdateRects
SDL_UpperBlit
SDL_VideoDriverName
SDL_VideoInit
SDL_VideoModeOK
SDL_VideoQuit
SDL_WM_GetCaption
SDL_WM_GrabInput
SDL_WM_IconifyWindow
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WM_ToggleFullScreen
SDL_WaitEvent
SDL_WaitThread
SDL_WarpMouse
SDL_WasInit
SDL_WriteBE16
SDL_WriteBE32
SDL_WriteBE64
SDL_WriteLE16
SDL_WriteLE32
SDL_WriteLE64
SDL_getenv
SDL_iconv
SDL_iconv_close
SDL_iconv_open
SDL_iconv_string
SDL_lltoa
SDL_mutexP
SDL_mutexV
SDL_putenv
SDL_revcpy
SDL_snprintf
SDL_strdup
SDL_strlcat
SDL_strlcpy
SDL_strtoull
SDL_ulltoa
SDL_vsnprintf

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b645ab219f17ed680cc2e0c76b9cab08

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

advapi32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 216KB - Virtual size: 216KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 9KB - Virtual size: 44KB

.pdata Size: 11KB - Virtual size: 11KB

.gfids Size: 512B - Virtual size: 24B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 840B

.text
Size: 216KB - Virtual size: 216KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 9KB - Virtual size: 44KB

.pdata
Size: 11KB - Virtual size: 11KB

.gfids
Size: 512B - Virtual size: 24B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 840B