OnlineFix64[.]dll

Resubmissions

16/07/2023, 14:16

230716-rlh51afc94 3

Sharing

Copy URL Twitter E-mail

General

Target

OnlineFix64.dll
Size

182KB
MD5

5ca356311b67d377ca386176bba2e278
SHA1

241de41e6a9a19683ca3f502b0785a9f245ece02
SHA256

9d57e7d424c431658cb3d7b1ca8f2d478a2fb8b34cbb24d9c0bf7174f6427c89
SHA512

dc9b43d3dbe7ea54ae2d770d70e61539e6f39d5706cf3288372ba7f3be2213e08c4979924e00a50187ecd40f44f15cc85ccfc33c1cdb25dd5ad3c8b73c38040e
SSDEEP

3072:L55fJgBNgAwNs4A9VKvyFgXTI+Maq7C9BQuKoGS4Bz+Lm2xjVIM:dUBNgAwNsIyFyTrq+XVKtS4BzJM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OnlineFix64.dll

Files

OnlineFix64.dll
.dll windows x64

54b06cd34ad5bd3359eaec37723e8738

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
HeapFree
HeapAlloc
SetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapReAlloc
LCMapStringW
GetStringTypeW
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW

Exports

Exports

Java_zombie_iso_LightingJNI_DoLightingUpdateNew
Java_zombie_iso_LightingJNI_WaitingForMain
Java_zombie_iso_LightingJNI_addLight
Java_zombie_iso_LightingJNI_addRoomLight
Java_zombie_iso_LightingJNI_addTempLight
Java_zombie_iso_LightingJNI_chunkBeginUpdate
Java_zombie_iso_LightingJNI_chunkEndUpdate
Java_zombie_iso_LightingJNI_chunkLightingDone
Java_zombie_iso_LightingJNI_configure
Java_zombie_iso_LightingJNI_destroy
Java_zombie_iso_LightingJNI_getCanSee
Java_zombie_iso_LightingJNI_getCouldSee
Java_zombie_iso_LightingJNI_getDarkMulti
Java_zombie_iso_LightingJNI_getLightInfo
Java_zombie_iso_LightingJNI_getSeen
Java_zombie_iso_LightingJNI_getSquareLighting
Java_zombie_iso_LightingJNI_getTargetDarkMulti
Java_zombie_iso_LightingJNI_getVertLight
Java_zombie_iso_LightingJNI_playerSet
Java_zombie_iso_LightingJNI_removeLight
Java_zombie_iso_LightingJNI_removeRoomLight
Java_zombie_iso_LightingJNI_removeTorch
Java_zombie_iso_LightingJNI_scrollDown
Java_zombie_iso_LightingJNI_scrollLeft
Java_zombie_iso_LightingJNI_scrollRight
Java_zombie_iso_LightingJNI_scrollUp
Java_zombie_iso_LightingJNI_setLightActive
Java_zombie_iso_LightingJNI_setLightColor
Java_zombie_iso_LightingJNI_setRoomLightActive
Java_zombie_iso_LightingJNI_squareAddCurtain
Java_zombie_iso_LightingJNI_squareAddDoor
Java_zombie_iso_LightingJNI_squareAddThumpable
Java_zombie_iso_LightingJNI_squareAddWindow
Java_zombie_iso_LightingJNI_squareBeginUpdate
Java_zombie_iso_LightingJNI_squareEndUpdate
Java_zombie_iso_LightingJNI_squareSet
Java_zombie_iso_LightingJNI_squareSetNull
Java_zombie_iso_LightingJNI_stateBeginUpdate
Java_zombie_iso_LightingJNI_stateEndFrame
Java_zombie_iso_LightingJNI_stateEndUpdate
Java_zombie_iso_LightingJNI_stateUpdateCounter
Java_zombie_iso_LightingJNI_teleport
Java_zombie_iso_LightingJNI_updateTorch

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

54b06cd34ad5bd3359eaec37723e8738

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 118KB - Virtual size: 117KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 7KB - Virtual size: 16KB

.pdata Size: 7KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 118KB - Virtual size: 117KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 7KB - Virtual size: 16KB

.pdata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB