Medusa[.]uno (1)[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

Medusa.uno (1).dll
Size

1.9MB
MD5

d45915a10746f2833b6e87077cec2bf0
SHA1

86c1c9ee7d458680053967e882caa8e17a98ccf8
SHA256

1ad7466d6703ad3d5d5bf98372546ffe55dcb60705da20c7e1dad8330e54ece3
SHA512

2dd36d345df5df6a395084b1110af9191f49ac3660f0eeedbfbdcf57ef983b30b91cca00fc3ac106b64b0cb982ca3e920071cbde753814406dc6bb49aff36138
SSDEEP

24576:WfpIo7AOFE4cjTKfy+SmNdNo4ql98/oLeEFmsYpZTmVBFRck052ZjVE/dH+wITP0:wAJHKq8dk4mVB7ZxE/IwITPS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Medusa.uno (1).dll

Files

Medusa.uno (1).dll
.dll windows x86

4fb438f44ef9676c36c144c888e0c0e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA
SHGetKnownFolderPath
ShellExecuteW

ole32

CoTaskMemFree

vcomp140

omp_get_thread_num

user32

ScreenToClient
GetCapture
ClientToScreen
IsChild
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
LoadCursorA
SetClipboardData
GetWindowThreadProcessId
CallWindowProcW
MessageBoxA
EnumWindows
SetWindowLongW
GetWindowTextLengthA
GetWindowTextW
ShowWindow
FindWindowW
FlashWindowEx
GetDC
GetKeyState
GetClipboardData

kernel32

SetStdHandle
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetStdHandle
SetFilePointerEx
GetFileSizeEx
GetModuleFileNameW
ReadFile
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
VirtualProtect
VirtualQuery
WideCharToMultiByte
CreateDirectoryA
VirtualFree
VirtualAlloc
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
GetLastError
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
lstrlenW
FreeLibraryAndExitThread
GetModuleHandleA
Process32NextW
Process32FirstW
CreateThread
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryW
QueryPerformanceFrequency
QueryPerformanceCounter
K32GetModuleInformation
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
GetTimeZoneInformation
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
LocalFree
FormatMessageA
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetEndOfFile
SetFileInformationByHandle
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetNativeSystemInfo
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
GetFileType
IsValidCodePage
GetACP
GetCommandLineA
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapSize
WriteConsoleW
ResetEvent
RaiseException
InterlockedFlushSList
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetDriveTypeW

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

gdi32

CreateFontA
SelectObject
CreateCompatibleDC
EnumFontFamiliesExW
CreateFontW
DeleteDC
GetFontData
DeleteObject

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fb438f44ef9676c36c144c888e0c0e9

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

vcomp140

user32

kernel32

imm32

gdi32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 234KB - Virtual size: 233KB

.data Size: 111KB - Virtual size: 1.9MB

_RDATA Size: 10KB - Virtual size: 9KB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 234KB - Virtual size: 233KB

.data
Size: 111KB - Virtual size: 1.9MB

_RDATA
Size: 10KB - Virtual size: 9KB

.reloc
Size: 60KB - Virtual size: 60KB