spEngine[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

spEngine.dll
Size

28.3MB
MD5

6bf9b5c83eede48e239032da10ac99ed
SHA1

669623af65df13fd865256f2e902403c3230416f
SHA256

a52ffce7a7c4c4227a94adb51f5b5b3755ae0efbbce3a78d81e6f3d8f436cd6e
SHA512

9a6bbdd22f28386e53b665889e81e5571424b77451230be7760a26c5e44169eddbd53137cc1e40a189c90770e14e4d28e7dedf655dd6c158ec516c88ac30739c
SSDEEP

393216:uGmJO/G30WLoFvWuJP5A05W8/nK25gEXQZlvd8uZKZYoMhiG0WunE5Z+J9znSFvc:udJ+G3RoFvWU1VnZcV3PXHd6beaAC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
spEngine.dll

Files

spEngine.dll
.dll windows x86

2863dbc5d83ed79d20a33eb2c6dee600

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SafeArrayGetElemsize
CreateErrorInfo

advapi32

RegQueryValueExW
RegSetValueExW

user32

CharNextW
SetClassLongW
EnumDisplayMonitors

kernel32

GetVersion
GetProcAddress
GetVersionExW
GetVersion
Sleep
MulDiv
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

gdi32

UnrealizeObject

version

VerQueryValueW

shfolder

SHGetFolderPathW

netapi32

NetApiBufferFree

ole32

OleUninitialize

comctl32

InitializeFlatSB

msvcrt

memset

shell32

ShellExecuteW
SHGetSpecialFolderLocation

wininet

InternetGetConnectedState

urlmon

HlinkNavigateString

magnification

MagSetImageScalingCallback

wsock32

WSACleanup

gdiplus

GdiplusShutdown

winhttp

WinHttpWriteData

winmm

timeGetTime

Exports

Exports

TMethodImplementationIntercept
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
dbkFCallWrapperAddr
dbkFCallWrapperAddr
ippApplyArithBoolAux
ippApplyCoCoAux
ippApplyColorTwist
ippApplyCompound
ippApplyDeconvolveLR
ippApplyDistanceTransform
ippApplyFastMarchingDistanceTransform
ippApplyFilter
ippApplyFilterAux
ippApplyGradientColor
ippApplyLUT
ippApplyMirror
ippApplyQuadTransform
ippApplyReduceBits
ippComputeHistogram
ippComputeMoments
ippComputeNorms
ippGetMoment
ippGetNorm
ippInitStatistics
ippInitStatisticsAux
ippIsInstalled
ippReleaseStatistics
speAddBigBoundRect
speAddMultiStroke
speAddPumpImage
speAddSurface
speApplyAuxMask
speApplyOnImage
speApplyWarpMesh
speBlendImageMaskColor
speCheckMarker
speClearInternalMasks
speClearMultiStroke
speClearPump
speClearStamp
speCloneSelf
speCollectCCD
speCommit
speCopyToFrontSurface
speDeleteBackgroundTile
speDeleteCloneImage
speDeleteContour
speDeleteMarker
speDeleteMask
speDeleteNozzle
speDeletePolyTexture
speDeleteSelection
speDeleteSidekick
speDeleteStencil
speDeleteSurfaceById
speDeleteSurfaceByIndex
speDeleteTexture
speDeselectPump
speDrawEllipse
speDrawEllipseRect
speDrawLine
speDrawMultiPoly
speDrawMultiPolyByIndex
speDrawMultiPolyFinish
speDrawPoly
speDrawPolySimple
speDrawRectangle
speDrawRectangleRect
speDrawSpline
speDrawSplineSimple
speDropShadow
speGetAction
speGetBigBoundRect
speGetBoundRect
speGetBrushCommon
speGetBrushSpecific
speGetColorParams
speGetColorTwistIppParams
speGetCompoundIppParams
speGetDrawParams
speGetFilter33Params
speGetFilterIppParams
speGetInternalImage
speGetInternalMask
speGetMouseData
speGetMultiBrushCommon
speGetMultiStrokeSize
speGetNozzleParams
speGetPalette
speGetPixelColor
speGetPixelRGB
speGetRenderParams
speGetShadowParams
speGetShiftParams
speGetShortPaletteColor
speGetSpreadParams
speGetUndo
speGetVersion
speHandMouseDown
speHandMouseMove
speHandMouseUp
speInit
speInternalToMask
speInvertContour
speInvertMask
speInvertSidekick
speInvertStencil
speProcArithBool
speProcGrayscale
speProcMirror
speProcPalNearestColor
speProcPalNearestLuminance
speProcPalPseudoColor
speProcTessellClear
speProcTessellRedraw
speProcTessellation
speProcTest
speResetBigBoundRect
speResetRoi
speRestoreUndo
speRollback
speRollbackRect
speSelectBrush
speSelectPumpImage
speSelectSurfaceById
speSelectSurfaceByIndex
speSetAction
speSetBackgroundTile
speSetBrush
speSetBrushSpecific
speSetCapacityEnvelope
speSetCbBrushMask
speSetCloneImage
speSetClonePosition
speSetColorCurve
speSetContour
speSetMarker
speSetMask
speSetMultiStrokePos
speSetNozzle
speSetPalette255C
speSetPalette3C
speSetPaletteFromShortPal
speSetPolyTexture
speSetRoi
speSetSelection
speSetShape
speSetShortPalette
speSetSidekick
speSetSizeEnvelope
speSetStamp
speSetStencil
speSetStencilPositionStatus
speSetSurface
speSetSurfaceId
speSetTexture
speSetUndoRect
speSidekickToBackSurface
speSurfaceAddScanline
speSurfaceBegin
speSurfaceFinish
speSyncBackSurface
speSyncFrontSurface
speUpdateBrush
speUpdateImmediate
speUpdateMultiBrush
speUtilColorFromTemperature
speUtilGetEllipsePoints
speUtilGetLineData
speUtilGetLinePoints
speUtilGetSimplifiedPoly
speUtilGetSplinePoly
speUtilScalePoly
speWarpBegin
speWarpEnd
speWarpExecute

Sections

.text
Size: - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 34KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.w1k
Size: - Virtual size: 29.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fHb
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0b+
Size: 28.2MB - Virtual size: 28.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2863dbc5d83ed79d20a33eb2c6dee600

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

shfolder

netapi32

ole32

comctl32

msvcrt

shell32

wininet

urlmon

magnification

wsock32

gdiplus

winhttp

winmm

Exports

Exports

Sections

.text Size: - Virtual size: 6.6MB

.itext Size: - Virtual size: 25KB

.data Size: - Virtual size: 165KB

.bss Size: - Virtual size: 34KB

.idata Size: - Virtual size: 17KB

.didata Size: - Virtual size: 3KB

.edata Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 68B

.w1k Size: - Virtual size: 29.8MB

.fHb Size: 4KB - Virtual size: 3KB

.0b+ Size: 28.2MB - Virtual size: 28.2MB

.reloc Size: 2KB - Virtual size: 2KB

.rsrc Size: 58KB - Virtual size: 58KB

.text
Size: - Virtual size: 6.6MB

.itext
Size: - Virtual size: 25KB

.data
Size: - Virtual size: 165KB

.bss
Size: - Virtual size: 34KB

.idata
Size: - Virtual size: 17KB

.didata
Size: - Virtual size: 3KB

.edata
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 68B

.w1k
Size: - Virtual size: 29.8MB

.fHb
Size: 4KB - Virtual size: 3KB

.0b+
Size: 28.2MB - Virtual size: 28.2MB

.reloc
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 58KB - Virtual size: 58KB