Interium[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Interium.dll
Size

5.3MB
MD5

2c71078f9765af6b43015a410db46120
SHA1

d2bd85a8d350a6035ce4515566039e4b0e2a7a30
SHA256

88d4d5fed73f74a6f0cb0d8163432741ec00b39547e4e7842f1bfa990b5d3d86
SHA512

a97b08b1097b7ef16b35b172b8ed3d596c338fb29b550c8ba0ee78921c085c1ee7af45d17a743187d40ab50f7fff38835f3e010ddfa5e244bc6bfba32f9a36e1
SSDEEP

98304:dh/xM/uZzVrwQYpKPJDeg3lPq6hTa1DMn:L/xFhVrwQrPJ9iY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Interium.dll

Files

Interium.dll
.dll windows x86

c0f124010e745eb8a94d2432f40949e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
Sleep
GetProcAddress
SizeofResource
VirtualAlloc
FindResourceA
LoadLibraryA
LockResource
CreateThread
LoadResource
Beep
GetCurrentProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess

user32

MessageBoxA

shell32

ShellExecuteA

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

_CxxThrowException
_except_handler4_common
memset
__std_exception_copy
memcpy
memmove
__std_exception_destroy
__CxxFrameHandler3
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_crt_atexit
_cexit
_execute_onexit_table
_register_onexit_function

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0f124010e745eb8a94d2432f40949e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 5.3MB - Virtual size: 5.3MB

.reloc Size: 1024B - Virtual size: 736B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

.reloc
Size: 1024B - Virtual size: 736B