7-zip64[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

7-zip64.dll
Size

1.4MB
MD5

c79a8ea553bc9ece7457a8b7a38e48cb
SHA1

3c9f7ac4dfbf60e62ef857a2e00195cc3817b913
SHA256

44c80081308d881a9733f5a7b1688a90ae9051ded08e476fcc46171b1fcb51e9
SHA512

d2f12eb44f7ce696875b0305c080b967efb1814752a9e43e411bf23413b96b24815bb73e4546d195a60ccba86609a8f546858479c7fbe9b19037bc44367bf4fa
SSDEEP

24576:NiuhH1OQLm4WMbQbyy7BoEo0Dqu85wUvxWKBONIyh9zOIqw9r2E1wt:NioH1TLm4NbQhyEXqu85UC/w9r2xt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7-zip64.dll

Files

7-zip64.dll
.dll windows x64

280ec806a67784db370443a2e239cf6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
GetLastError
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventA
CreateSemaphoreA
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryExA
LoadLibraryExW
LoadLibraryA
LoadLibraryW
LocalFree
FormatMessageA
FormatMessageW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
CreateDirectoryA
CreateDirectoryW
CreateFileW
DeleteFileA
DeleteFileW
GetFullPathNameA
GetFullPathNameW
RemoveDirectoryA
RemoveDirectoryW
SetFileAttributesA
SetFileAttributesW
SetFileTime
GetTempPathW
SetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetSystemDirectoryA
GetSystemDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetTempPathA
MoveFileA
MoveFileW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetLogicalDriveStringsW
GetLogicalDriveStringsA
CreateFileA
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
DeviceIoControl
GetCurrentProcess
CompareFileTime
FileTimeToSystemTime
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
VirtualFree
FileTimeToLocalFileTime
WaitForMultipleObjects
GetStdHandle
QueryPerformanceCounter
OpenEventA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
GetExitCodeThread
GetVersionExA
lstrcpynA
SetThreadPriority
ResumeThread
LoadResource
LockResource
SizeofResource
FindResourceA
SetFileApisToOEM
SetFileApisToANSI
AreFileApisANSI
OutputDebugStringW
OutputDebugStringA
WriteConsoleW
SetFilePointerEx
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetStringTypeW
SetConsoleCtrlHandler
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
WaitForSingleObjectEx
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
FindFirstFileExA
GetACP
GetFileType
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
EncodePointer
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
LocalFileTimeToFileTime
VirtualAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

user32

SystemParametersInfoA
IsDialogMessageA
LoadIconA
GetWindow
GetLastActivePopup
GetWindowThreadProcessId
GetDesktopWindow
SetWindowLongPtrA
GetWindowLongPtrA
ScreenToClient
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextLengthA
SetWindowTextA
InvalidateRect
ReleaseDC
GetDC
DrawTextExW
DrawTextExA
GetSystemMetrics
EnableWindow
KillTimer
SetTimer
SendDlgItemMessageA
IsDlgButtonChecked
CheckDlgButton
GetDlgItemTextW
GetDlgItemTextA
SetDlgItemTextW
SetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxParamW
DialogBoxParamA
CreateDialogParamW
CreateDialogParamA
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
PostMessageA
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
RegisterWindowMessageA
wsprintfA
LoadStringA
EnumWindows
CharPrevExA
CharToOemA
CharPrevA
CharNextA
CharLowerW
CharLowerA
CharUpperW
CharUpperA
SendMessageW

gdi32

SelectObject

shell32

SHGetFileInfoA

oleaut32

VariantCopy
VariantClear
SysAllocStringByteLen
SysAllocString
SysFreeString

Exports

Exports

SevenZip
SevenZipCheckArchive
SevenZipClearOwnerWindow
SevenZipCloseArchive
SevenZipConfigDialog
SevenZipFindFirst
SevenZipFindNext
SevenZipGetAccessTime
SevenZipGetAccessTimeEx
SevenZipGetArcAccessTimeEx
SevenZipGetArcCompressedSize
SevenZipGetArcCompressedSizeEx
SevenZipGetArcCreateTimeEx
SevenZipGetArcDate
SevenZipGetArcFileName
SevenZipGetArcFileSize
SevenZipGetArcFileSizeEx
SevenZipGetArcOSType
SevenZipGetArcOriginalSize
SevenZipGetArcOriginalSizeEx
SevenZipGetArcRatio
SevenZipGetArcTime
SevenZipGetArcWriteTimeEx
SevenZipGetArchiveType
SevenZipGetAttribute
SevenZipGetBackGroundMode
SevenZipGetCRC
SevenZipGetCompressedSize
SevenZipGetCompressedSizeEx
SevenZipGetCreateTime
SevenZipGetCreateTimeEx
SevenZipGetCursorInterval
SevenZipGetCursorMode
SevenZipGetDate
SevenZipGetDefaultPassword
SevenZipGetFileCount
SevenZipGetFileName
SevenZipGetLastError
SevenZipGetMethod
SevenZipGetOSType
SevenZipGetOriginalSize
SevenZipGetOriginalSizeEx
SevenZipGetRatio
SevenZipGetRunning
SevenZipGetSubVersion
SevenZipGetTime
SevenZipGetVersion
SevenZipGetWriteTime
SevenZipGetWriteTimeEx
SevenZipIsSFXFile
SevenZipKillOwnerWindowEx
SevenZipKillOwnerWindowEx64
SevenZipOpenArchive
SevenZipPasswordDialog
SevenZipQueryFunctionList
SevenZipSetBackGroundMode
SevenZipSetCursorInterval
SevenZipSetCursorMode
SevenZipSetDefaultPassword
SevenZipSetOwnerWindow
SevenZipSetOwnerWindowEx
SevenZipSetOwnerWindowEx64
SevenZipSetPriority
SevenZipSetUnicodeMode
SevenZipSfxConfigDialog
SevenZipSfxFileStoring

Sections

.text
Size: 831KB - Virtual size: 830KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

280ec806a67784db370443a2e239cf6d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 831KB - Virtual size: 830KB

.rdata Size: 298KB - Virtual size: 297KB

.data Size: 20KB - Virtual size: 50KB

.pdata Size: 49KB - Virtual size: 49KB

.gfids Size: 512B - Virtual size: 388B

.rsrc Size: 262KB - Virtual size: 262KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 831KB - Virtual size: 830KB

.rdata
Size: 298KB - Virtual size: 297KB

.data
Size: 20KB - Virtual size: 50KB

.pdata
Size: 49KB - Virtual size: 49KB

.gfids
Size: 512B - Virtual size: 388B

.rsrc
Size: 262KB - Virtual size: 262KB

.reloc
Size: 7KB - Virtual size: 6KB