Medusa[.]uno [.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Medusa.uno .dll
Size

1.9MB
MD5

28a3cb0816bacb29e2bd1434189d363e
SHA1

d07424322b19ac9ce4f42d79f860ba836e3fae2e
SHA256

b1f3a37f40466800ef9f2eaf7f2ec93768b35feda5ea0203e7deae81e13bd040
SHA512

77212d70edc6ba46ad5bf1fc6cfcf95ff497ba5045f7804da0e33b8356921196270d5aa839bdf33744c1e93203d263a387e88d03efe0e2440958211f3487ad5f
SSDEEP

49152:Tpa6wKBOUVWUQ/DmsVZ3+tE/3vNMlPJC:k6wKBO9DmsVZeEqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Medusa.uno .dll

Files

Medusa.uno .dll
.dll windows x86

4fb438f44ef9676c36c144c888e0c0e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetKnownFolderPath
ShellExecuteW

ole32

CoTaskMemFree

vcomp140

omp_get_thread_num

user32

ScreenToClient
GetCapture
ClientToScreen
IsChild
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
LoadCursorA
SetClipboardData
GetWindowThreadProcessId
CallWindowProcW
MessageBoxA
EnumWindows
SetWindowLongW
GetWindowTextLengthA
GetWindowTextW
ShowWindow
FindWindowW
FlashWindowEx
GetDC
GetKeyState
GetClipboardData

kernel32

SetStdHandle
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetStdHandle
SetFilePointerEx
GetFileSizeEx
GetModuleFileNameW
ReadFile
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
VirtualProtect
VirtualQuery
WideCharToMultiByte
CreateDirectoryA
VirtualFree
VirtualAlloc
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
GetLastError
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
lstrlenW
FreeLibraryAndExitThread
GetModuleHandleA
Process32NextW
Process32FirstW
CreateThread
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryW
QueryPerformanceFrequency
QueryPerformanceCounter
K32GetModuleInformation
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
GetTimeZoneInformation
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
LocalFree
FormatMessageA
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetEndOfFile
SetFileInformationByHandle
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetNativeSystemInfo
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
GetFileType
IsValidCodePage
GetACP
GetCommandLineA
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapSize
WriteConsoleW
ResetEvent
RaiseException
InterlockedFlushSList
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetDriveTypeW

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

gdi32

CreateFontA
SelectObject
CreateCompatibleDC
EnumFontFamiliesExW
CreateFontW
DeleteDC
GetFontData
DeleteObject

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fb438f44ef9676c36c144c888e0c0e9

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

vcomp140

user32

kernel32

imm32

gdi32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 233KB - Virtual size: 233KB

.data Size: 111KB - Virtual size: 1.9MB

_RDATA Size: 10KB - Virtual size: 9KB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 233KB - Virtual size: 233KB

.data
Size: 111KB - Virtual size: 1.9MB

_RDATA
Size: 10KB - Virtual size: 9KB

.reloc
Size: 60KB - Virtual size: 60KB