InN6b93CPUAoKPF[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

InN6b93CPUAoKPF.dll
Size

628KB
MD5

9df7cda0e7db5f6df5166a949d80661f
SHA1

e993f02e6870356fccf3c19e51a06ea0e8b728b8
SHA256

71f23b912644e54ca7376ded84fe149a918caa20b92d82ce6600f3727d35c3ae
SHA512

110e2f0f8c87d6838887f80cb45345358dfa89b5a5552979103663fcb417a143ba0ecab810069212929583862d3f6c2e518e2653b16e6bebb1d964be5bdd4c0d
SSDEEP

12288:xJmJ6J4hBJbczk585joskU02CrwuXScPi:bm44vctoU02CrwySH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

InN6b93CPUAoKPF.dll

resource
InN6b93CPUAoKPF.dll

Files

InN6b93CPUAoKPF.dll
.dll regsvr32 windows x86

20e817a5abb68c6cd46e7e211273f8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
InterlockedExchange
HeapReAlloc
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
RtlUnwind
HeapFree
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
SystemTimeToFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
InterlockedIncrement
FindResourceExA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
lstrcmpA
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
InterlockedDecrement
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
MulDiv
FormatMessageA
lstrcpynA
VirtualProtect
SizeofResource
ExitProcess
GetFileSize
GlobalAlloc
GlobalFree
ReadFile
GlobalUnlock
GlobalReAlloc
SetFilePointer
CreateFileA
CloseHandle
GlobalLock
GetLastError
FindResourceA
LoadResource
LockResource
LocalAlloc
LocalFree
lstrlenA
lstrcmpiA
GetStringTypeExA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
SetUnhandledExceptionFilter

user32

PostQuitMessage
WindowFromPoint
KillTimer
SetTimer
SetRect
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
InflateRect
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
SetCursor
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
SetMenu
RedrawWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
wsprintfA
SetWindowTextA
IsDialogMessageA
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
DestroyIcon
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsWindow
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
MessageBoxA
TrackPopupMenu
GetKeyState
CharUpperA
EnableWindow
SendMessageA
InvalidateRect
ReleaseDC
GetDC
LockWindowUpdate
ScreenToClient
ClientToScreen
GetClientRect
SetForegroundWindow
IsWindowVisible
GetMenu
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClassInfoA
SetCapture
GetDCEx
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
CopyRect
PtInRect
GetMenuItemInfoA
LoadCursorA
GetSysColorBrush
GetClassLongA
ShowOwnedPopups
ShowWindow
UpdateWindow
IsWindowEnabled
GetDlgItem
GetParent
GetWindowLongA
PostMessageA
GetWindowRect
SetFocus
GetFocus
GetAsyncKeyState
SetActiveWindow
GetActiveWindow
GetCapture
SetWindowPos
MapDialogRect
GetSubMenu
GetWindow
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount

gdi32

CreateSolidBrush
CreateCompatibleBitmap
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
StretchDIBits
GetCharWidthA
CreateFontA
GetTextMetricsA
GetTextExtentPoint32A
GetBkColor
EnumFontFamiliesExA
GetStockObject
CreatePatternBrush
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
CreateRectRgn
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
PatBlt
CreateDIBitmap
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateCompatibleDC
SelectObject
StretchBlt
BitBlt
DeleteObject
CreatePalette
SelectPalette
RealizePalette

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCloseKey

shell32

DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragFinish

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Exports

Exports

DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20e817a5abb68c6cd46e7e211273f8bf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 276KB - Virtual size: 272KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 232KB - Virtual size: 228KB

.reloc Size: 56KB - Virtual size: 52KB

.text
Size: 276KB - Virtual size: 272KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 232KB - Virtual size: 228KB

.reloc
Size: 56KB - Virtual size: 52KB