envir[.]dll | Triage

Resubmissions

23-10-2023 11:05

231023-m7cswsaa57 3

23-10-2023 11:05

23-10-2023 11:03

23-10-2023 11:02

23-10-2023 11:00

Sharing

Copy URL

Twitter E-mail

General

Target

envir.dll
Size

1.9MB
MD5

9038d0a3d033f78513824a5509b453b9
SHA1

387cb5388f44f175a180c0cf2c1ac7a75cba2deb
SHA256

8802714e453577dc6f2decadefa75d4ea26c88de56dce193a50293d699799190
SHA512

8514b7eae273436d5e41b5754f8fd34efcfaf4ed99b5b81c5a1b15e9decbe5f59cd4e2d22a14b7ef2610c15a1172fc20595a06e41b7d4ff4e970b0c5607710ba
SSDEEP

24576:vtOooJS5jqWfLMiRfGu2WE9v6hkhlpnZgiQ4tZlmsQ1UcmKgce4kLUO4oo9E0Dg:voJpW4cT8/qiLQdUcGkoo20

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
envir.dll

Files

envir.dll
.dll windows:6 windows x86

a15787fdb5dd616d2c98fc3d7eb82fb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
GetLastError
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
WaitForMultipleObjects
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
CloseHandle
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventA
CreateSemaphoreA
LocalFileTimeToFileTime
FileTimeToLocalFileTime
CompareFileTime
CreateDirectoryA
CreateDirectoryW
CreateFileW
DeleteFileA
DeleteFileW
SetFileAttributesA
SetFileAttributesW
GetTempPathW
SetLastError
GetModuleHandleW
GetTempPathA
FindClose
FindFirstFileA
FindFirstFileW
GetFileAttributesA
GetFileAttributesW
CreateFileA
ReadFile
WriteFile
GetSystemInfo
GetSystemTimeAsFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
RtlUnwind
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
CreateThread
ExitThread
LoadLibraryExW
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapSize
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetProcessHeap
GetFileType
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LoadLibraryW
LCMapStringW
WriteConsoleW

user32

CharUpperW
CharUpperA
CharPrevExA

oleaut32

VariantCopy
SysAllocString
SysFreeString
SysStringLen
VariantClear
SysAllocStringLen
SysAllocStringByteLen

Exports

Exports

AreateDecoder
AreateEncoder
AreateObject
AetHandlerProperty
AetHandlerProperty2
AetHashers
AetIsArc
AetMethodProperty
AetNumberOfFormats
AetNumberOfMethods
AetCaseSensitive
AetCodecs
Crash

Sections

.text
Size: 799KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 900KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

a15787fdb5dd616d2c98fc3d7eb82fb1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

Exports

Exports

Sections

.text Size: 799KB - Virtual size: 799KB

.rdata Size: 144KB - Virtual size: 144KB

.data Size: 15KB - Virtual size: 55KB

.rsrc Size: 900KB - Virtual size: 896KB

.reloc Size: 43KB - Virtual size: 43KB

.text
Size: 799KB - Virtual size: 799KB

.rdata
Size: 144KB - Virtual size: 144KB

.data
Size: 15KB - Virtual size: 55KB

.rsrc
Size: 900KB - Virtual size: 896KB

.reloc
Size: 43KB - Virtual size: 43KB