asio4all[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

asio4all.dll
Size

115KB
MD5

de9b771e11a5800254354124e16856ee
SHA1

d86ec1217077f65bdae1bc207ba16ad5ed98feaf
SHA256

f53f755e8ae24f9e6d1b925bf32702cf4bd0a92511f87d6c3503830a1fbef9da
SHA512

ea0c022843997c05d9d542479dc8c32e6df9bb0e936b1d3e12aeba3ee46b45cee059e640bc0fa777535befc1cfb9d08cddfc32c6090999c19a4171cf479ababd
SSDEEP

1536:ZvzplGOrgSF1HpH01/n8Cx3TzN9CVmkcu32hl:xJjeRDu32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
asio4all.dll

Files

asio4all.dll
.dll regsvr32 windows x86

1910aa462df16700a00a0ff7b2051c13

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetCurrentProcess
GetModuleFileNameA
WideCharToMultiByte
TerminateThread
GetVersion
CreateFileA
DeviceIoControl
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
HeapWalk
GetCurrentThreadId
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetModuleHandleA
VirtualAlloc
VirtualFree
VirtualLock
VirtualUnlock
CreateThread
SetThreadPriority
GetCurrentThread
WaitForSingleObject
WaitForMultipleObjects
CreateEventA
SetEvent
ResetEvent

ksuser

KsCreatePin

setupapi

SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod
midiOutOpen
midiOutGetDevCapsA
midiOutClose
midiOutGetNumDevs
midiOutGetID

gdi32

DeleteObject
CreateSolidBrush
SetBkColor
SetTextColor

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

user32

ShowWindow
LoadBitmapA
MessageBoxA
SetTimer
KillTimer
LoadStringA
SetFocus
CreateWindowExA
DestroyWindow
UnregisterClassA
DefWindowProcA
SendMessageA
PostMessageA
MoveWindow
GetWindowRect
ScreenToClient
GetCursorPos
SetWindowPos
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
PostThreadMessageA
DialogBoxParamA
GetFocus
LoadIconA
SendDlgItemMessageA
GetDlgItem
EndDialog
RegisterClassExA
SetForegroundWindow

comctl32

ImageList_AddIcon
ImageList_Create

shell32

DllGetVersion
Shell_NotifyIconA
ShellExecuteA

advapi32

RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegFlushKey

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RWDEFCloseDevice
RWDEFDriveAudio
RWDEFGetDeviceInfo
RWDEFGetDeviceNameAndVersion
RWDEFGetEventBusInfo
RWDEFGetEventChannelInfo
RWDEFGetEventControllerInfo
RWDEFGetEventInfo
RWDEFGetEventNoteInfo
RWDEFIdle
RWDEFIsCloseOK
RWDEFIsPanelAppLaunched
RWDEFLaunchPanelApp
RWDEFOpenDevice
RWDEFQuitPanelApp
RWDEFSetAudioInfo

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1910aa462df16700a00a0ff7b2051c13

Headers

File Characteristics

Imports

kernel32

ksuser

setupapi

winmm

gdi32

ole32

user32

comctl32

shell32

advapi32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 6KB - Virtual size: 1.1MB

.rsrc Size: 55KB - Virtual size: 54KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 6KB - Virtual size: 1.1MB

.rsrc
Size: 55KB - Virtual size: 54KB

.reloc
Size: 6KB - Virtual size: 6KB