ImplatSetup[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

ImplatSetup.dll
Size

99KB
MD5

70019198235667810166a9c342e819a1
SHA1

19f469754b43fdf1276e32b784a3ec1709ab4bc8
SHA256

5e620bc937b53202b1ecf3439cad3fa5841e3450dc3fe0f15a3ef89cff5a8272
SHA512

23aa0798d9e2891bb76588b1a36a5eb7cb807f78fa3b659d94674cbb532ab3ac4bb62a74a191223f7162c4c18844bbad9257b2fef4b74fcf4fa6c50b95cb28c2
SSDEEP

3072:uj+sPPzX5pn/72KEALNghbeKHxsJCHYFBn/dDgT+PBxUV:+VP9t/SALNghbuRBnxumxUV

Score

1^/10

Malware Config

Signatures

Files

ImplatSetup.dll
.dll windows x86

2fa02a0ffa84aa590767ce613251a201

Code Sign

33:00:00:06:30:40:da:69:cf:31:09:00:eb:00:00:00:00:06:30
Certificate

Issuer

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/06/2022, 17:59

Not After

15/09/2023, 17:59

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Development Root Certificate Authority 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/05/2014, 17:33

Not After

28/05/2029, 17:43

Subject

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:64:0e:f6:95:66:83:bf:fa:6f:a2:e8:12:22:d9:a9:1a:28:80:85:10:76:db:75:da:7b:8a:63:60:e7:ce:4b
Signer

Actual PE Digest

54:64:0e:f6:95:66:83:bf:fa:6f:a2:e8:12:22:d9:a9:1a:28:80:85:10:76:db:75:da:7b:8a:63:60:e7:ce:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcmp
__CxxFrameHandler3
_except_handler4_common
_lock
_initterm
free
__dllonexit
_XcptFilter
memmove
memcpy
_CxxThrowException
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_callnewh
malloc
vswprintf_s
_wcsicmp
??1type_info@@UAE@XZ
_amsg_exit
iswspace
_vsnprintf_s
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_purecall
??3@YAXPAX@Z
_onexit
memcpy_s
_vsnwprintf
_unlock
?terminate@@YAXXZ
memset

api-ms-win-core-libraryloader-l1-1-0

GetModuleHandleExW
LoadLibraryExW
GetModuleHandleW
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress
FreeLibrary

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW
OpenSemaphoreW
CreateMutexExW
ReleaseMutex
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
TraceMessage
GetTraceEnableFlags

api-ms-win-devices-config-l1-1-0

CM_Locate_DevNodeW
CM_Get_DevNode_Status

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-com-l1-1-0

StringFromGUID2

api-ms-win-service-management-l1-1-0

OpenServiceW
CloseServiceHandle
OpenSCManagerW

api-ms-win-core-registry-l1-1-0

RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegDeleteTreeW
RegCreateKeyExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

netsetupapi

NetSetupDeleteObject
NetSetupGetObjectProperties
NetSetupFreeObjectProperties
NetSetupFreeObjects
NetSetupGetObjects
NetSetupSetObjectProperties
NetSetupOpenAdvancedPropertyKey
NetSetupCreateObject

api-ms-win-core-file-l1-1-0

CreateFileW

Exports

Exports

ImplatMuxDispatch
ImplatMuxMemberUninstall
ImplatMuxModified
ImplatMuxVirtualInterfaceChanged
ImplatMuxVirtualInterfaces
ImplatTransactionDispatch
ImplatVmsBinding

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fa02a0ffa84aa590767ce613251a201

Code Sign

33:00:00:06:30:40:da:69:cf:31:09:00:eb:00:00:00:00:06:30Certificate

Extended Key Usages

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03Certificate

Key Usages

54:64:0e:f6:95:66:83:bf:fa:6f:a2:e8:12:22:d9:a9:1a:28:80:85:10:76:db:75:da:7b:8a:63:60:e7:ce:4bSigner

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-devices-config-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-service-management-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

netsetupapi

api-ms-win-core-file-l1-1-0

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 83KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

33:00:00:06:30:40:da:69:cf:31:09:00:eb:00:00:00:00:06:30
Certificate

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

54:64:0e:f6:95:66:83:bf:fa:6f:a2:e8:12:22:d9:a9:1a:28:80:85:10:76:db:75:da:7b:8a:63:60:e7:ce:4b
Signer

.text
Size: 84KB - Virtual size: 83KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB