onetap_v3_legacy_release[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

onetap_v3_legacy_release.dll
Size

12.3MB
MD5

bf5c68f526bb0cb30234498188267e71
SHA1

411cce180d98ccbe5a93a09232bc79dfddce9e4a
SHA256

54d47ddbf356ca530904926ca0398b9ad99020230b9b7e012a255249e06e5f63
SHA512

74e3a9df07098c8bcebfe6405c591cb00f695fa349357a783bd2edbdc182aaea07de55fc441f1c69d5c611f073e81949effd2bfdd8a5d988a645748fd3541508
SSDEEP

393216:RDncbSMfNYzp/UvgzQfWvvP0mzYdV2IGOU2VpH:R2S+NY1/UIsOvEGiV2H/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
onetap_v3_legacy_release.dll

Files

onetap_v3_legacy_release.dll
.dll windows x86

5329ea9b172a410aa3f16fa07c6c37d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

FindWindowA

gdi32

AddFontMemResourceEx

msvcp140

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ

d3d9

Direct3DCreate9

imm32

ImmSetCompositionWindow

vcruntime140

__current_exception

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-math-l1-1-0

fmaxf

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-stdio-l1-1-0

fgetpos

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn

api-ms-win-crt-filesystem-l1-1-0

rename

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_time64

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exon0
Size: - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.exon1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.exon2
Size: 12.2MB - Virtual size: 12.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5329ea9b172a410aa3f16fa07c6c37d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msvcp140

d3d9

imm32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: - Virtual size: 1.7MB

.rdata Size: - Virtual size: 1.8MB

.data Size: - Virtual size: 1.5MB

_RDATA Size: - Virtual size: 9KB

.exon0 Size: - Virtual size: 6.0MB

.exon1 Size: 2KB - Virtual size: 1KB

.exon2 Size: 12.2MB - Virtual size: 12.2MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 1.7MB

.rdata
Size: - Virtual size: 1.8MB

.data
Size: - Virtual size: 1.5MB

_RDATA
Size: - Virtual size: 9KB

.exon0
Size: - Virtual size: 6.0MB

.exon1
Size: 2KB - Virtual size: 1KB

.exon2
Size: 12.2MB - Virtual size: 12.2MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 469B