SecuriteInfo[.]com[.]Variant[.]Barys[.]431435[.]19309[.]27214[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Variant.Barys.431435.19309.27214.dll
Size

5KB
MD5

47f4df3b443cdc85222ed89dd73a48d3
SHA1

89e88095529eadb0c5a48c4886887479860c8928
SHA256

b0f2c2e6f15eb791cdf830a60a72ecbf6f4aad1072ac5bbbea95645e2185580e
SHA512

d7cff134127d5222fc0583d6045ff5a8e94d2a94545b4c8b5c53b28a7fee702568202a37111ab8a25a51db120cb2b5301b879783b1bb7e4e9a71fac9d279bebd
SSDEEP

48:SPQqVrqJIr6tM1UcDnUJ+DhNUgEcgKCk52Ew0BprPBKciSNMfwCjCAX7IhE5y:urhdU7UCq270To1VfwCjd7IhE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Variant.Barys.431435.19309.27214.dll

Files

SecuriteInfo.com.Variant.Barys.431435.19309.27214.dll
.dll windows x86

b41dc75efc329e0801cfd3267cab4c55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
EnumResourceTypesA
GetProcAddress
VirtualAlloc

mapi32

ord203
ord141
ord159
ord133
ord75
ord78
ord15
ord152

ws2_32

connect
accept
ntohl
WSARecvDisconnect
WSCEnumProtocols
WSAGetQOSByName

pdh

PdhGetFormattedCounterArrayW
PdhGetRawCounterArrayA
PdhCollectQueryData
PdhGetDefaultPerfCounterW
PdhVbIsGoodStatus
PdhLookupPerfIndexByNameW
PdhUpdateLogW

rtutils

MprSetupProtocolEnum
RouterLogEventDataW
TracePutsExA
TraceRegisterExW
TraceRegisterExA
TraceDumpExW

mpr

WNetEnumResourceW
WNetConnectionDialog

ole32

HMETAFILEPICT_UserUnmarshal
CreateDataCache
CLIPFORMAT_UserMarshal
HENHMETAFILE_UserSize
MkParseDisplayName
ReadClassStm
OleIsCurrentClipboard
HMETAFILEPICT_UserSize
HACCEL_UserUnmarshal

comdlg32

PrintDlgExW
PrintDlgExA
ChooseFontW
ChooseColorA
ReplaceTextW
FindTextA

rtm

RtmGetFirstRoute
RtmCloseEnumerationHandle
RtmDeregisterClient
RtmDeleteRoute
RtmGetNetworkCount
MgmInitialize

rpcrt4

I_RpcTransServerNewConnection
RpcMgmtEpEltInqDone
RpcMgmtEnableIdleCleanup
NdrComplexStructFree

Exports

Exports

eIxo

Sections

.text
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b41dc75efc329e0801cfd3267cab4c55

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mapi32

ws2_32

pdh

rtutils

mpr

ole32

comdlg32

rtm

rpcrt4

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 670B

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 126B

.reloc Size: 512B - Virtual size: 148B

.text
Size: 1024B - Virtual size: 670B

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 126B

.reloc
Size: 512B - Virtual size: 148B