ix[.]dlld[.]dll

Resubmissions

10/11/2023, 16:43

231110-t8ahgsah6y 3

23/10/2023, 15:12

231023-sk6qcahe4t 3

Sharing

Copy URL Twitter E-mail

General

Target

ix.dlld.dll
Size

1.6MB
MD5

0e368752842e645b60153c9ad5bd1e95
SHA1

0cdf5e7e0c029c7cd02edfee495572f8e5370981
SHA256

7471f8ab5781a630f2e2f11fa016b59d7bbcdf3842000cc97f99af87ff44bc9e
SHA512

3bf11b3a02287dc8325daa42101ace333c68b99d040d6c41aebbb013b995b3e416bdda6c43ec48a5fe22de01e719019b7db22eb6ca947c8857b2be4ea1fe0cef
SSDEEP

24576:XI3AwD982Nlh6IG7EeYU7TzGG3AWsXjkgpW9+Krg7rimtstW+35FRbwdzla:kboeKHGi2TkgKm7sI+35Hwdzla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ix.dlld.dll

Files

ix.dlld.dll
.dll windows:4 windows x86

eb842ac86186f73eea06f1e518a1bd36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
SetFilePointer
ReadFile
GetSystemTimeAsFileTime
GetFileSize
CreateMutexW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SystemTimeToFileTime
GetSystemTime
SetEvent
GetEnvironmentVariableA
OpenEventA
LoadLibraryA
GetLocalTime
GetVersionExA
GetComputerNameW
FindFirstVolumeA
FindClose
FindFirstFileA
CreateEventA
CreateMutexA
GlobalFree
GlobalAlloc
ResetEvent
GetModuleFileNameW
GetPrivateProfileStringW
lstrlenA
DisableThreadLibraryCalls
QueryDosDeviceA
CreateThread
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
GetDriveTypeA
GetVolumeInformationA
FindFirstVolumeMountPointA
FindNextVolumeMountPointA
FindVolumeMountPointClose
FindNextVolumeA
FindVolumeClose
GetVolumePathNamesForVolumeNameA
CreateFileW
CreateFileA
FlushFileBuffers
Sleep
DeviceIoControl
CloseHandle
SetLastError
GetLastError
GetCurrentThreadId
ReleaseMutex
WaitForSingleObject
LocalAlloc
LocalFree
GetTimeZoneInformation
CompareStringA
SetStdHandle
GetConsoleMode
GetConsoleCP
RtlUnwind
MultiByteToWideChar
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FileTimeToSystemTime
FileTimeToLocalFileTime
WideCharToMultiByte
ExitThread
ResumeThread
GetCommandLineA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
GetFullPathNameA
GetCurrentDirectoryA
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetFileAttributesA

user32

FindWindowA
SendMessageA
BroadcastSystemMessageA
wsprintfW

advapi32

RegCreateKeyExA
RegEnumValueA
RegSetValueExA
RegFlushKey
GetUserNameW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
LookupAccountSidA
EqualSid
RegOpenKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiRemoveDevice
SetupDiGetDeviceRegistryPropertyA

Exports

Exports

ASASetWearOutParams
AsaAlarm
AsaApiInternalGetRaid6Options
AsaBattery
AsaClearAdapterSasPhyInfo
AsaClearControllerNvsRam
AsaClearDeadDriveLog
AsaClearDriveErrorTable
AsaClearMaxCachePool
AsaClearPreservedLogicalDriveCache
AsaCloseAdapter
AsaCommitDriveConfiguration
AsaContainer
AsaContainerForceOnline
AsaContainerGetCacheMode
AsaContainerGetCacheParams
AsaContainerSetCacheParams
AsaContainerSetITPCacheSettings
AsaContainerSetMaxCacheWriteCacheSettings
AsaContainerSetPowerManagement
AsaContainerSwapDrives
AsaCreateJBOD
AsaCreateLogicalDrive
AsaCreateMirrorFromVolume
AsaCreatePrimaryContainer
AsaCreateRAID50
AsaCreateRAID60
AsaCreateSecondaryContainer
AsaCreateUFIfromFile
AsaCtrChangeComplete
AsaCtrRemovalComplete
AsaDeleteJBOD
AsaDeleteMultipleContainer
AsaDiagnostic
AsaDiagnosticEx
AsaDisableDebugLogs
AsaEnclosureMgt
AsaEnumAdaptersA
AsaEnumAdaptersW
AsaEnumChannels
AsaEnumScsiChannels
AsaExposeCtrToOs
AsaExposeNewPhysicalSpace
AsaFailPartition
AsaFailoverSpace
AsaFailoverSpaceByUniqueCtrID
AsaForcePartitionCacheUpdate
AsaGetAdapterOemId
AsaGetAdapterSasPhyInfo
AsaGetAutomaticFailover
AsaGetBusTargetLunFromDevHandle
AsaGetConnectorMap
AsaGetConnectorMapSize
AsaGetContainerInfo
AsaGetContainerInfo2
AsaGetContainerOptions
AsaGetContainerUsage
AsaGetControllerInternalLogData
AsaGetControllerInternalLogInfo
AsaGetControllerStats
AsaGetCopyback
AsaGetDeadDriveLog
AsaGetDeadDriveLog2
AsaGetDiskSasPhyInfo
AsaGetDriveErrorTable
AsaGetDriveErrorTable2
AsaGetDriveErrorTableSize
AsaGetDriveLetterUsage
AsaGetDriveLetterUsageEx
AsaGetErrorTextA
AsaGetErrorTextW
AsaGetErrorTunableParamList
AsaGetErrorTunableProfileID
AsaGetExpanderCount
AsaGetFsaPartitionInfo
AsaGetGeneralInformation
AsaGetGeneralInformation2
AsaGetGeneralInformation2Ex
AsaGetHandleFromIndex
AsaGetHandleFromSerial
AsaGetIndexFromSerial
AsaGetMaxCacheFeatures
AsaGetMaxCacheIndexList
AsaGetNvramEventLog
AsaGetOSType
AsaGetOwnerId
AsaGetPCIIds
AsaGetPCISerdesInfo
AsaGetPbsiConfiguration
AsaGetPhyPCIDfeInfo
AsaGetPhySASDfeInfo
AsaGetPhysicalDeviceInfo
AsaGetPreservedLogicalDriveInfo
AsaGetRaid6Options
AsaGetSASAddress
AsaGetSPMParameters
AsaGetSPMParametersDefault
AsaGetScsiStorageDeviceInfo
AsaGetSmartDeviceInfo
AsaGetSmartHistoryBufferData
AsaGetSmartHistoryBufferStatus
AsaGetSmartHistoryDescriptor
AsaGetSmartHistoryDictionary
AsaGetSmartHistoryModuleCount
AsaGetStorageDeviceInfo
AsaGetTaskDetails
AsaGetTaskList
AsaGetTaskProgress
AsaGetVersionStatus
AsaGrowPrimaryVolumeSet
AsaHasDirtyData
AsaHasDirtyDataContainer
AsaInitCreateThread
AsaInitStorageDeviceForFsa
AsaInitStorageDeviceSetForFsa
AsaInstallFeatureKey
AsaInvokeCpldCommand
AsaInvokeSetBiosParamsCommand
AsaInvokeSetBootDevice
AsaIsAdapterPausedEx
AsaIsNTOS
AsaIsUnixOS
AsaLinkForContainerExInternal
AsaMaxCacheWriteCacheDisableAll
AsaMirror
AsaMorphContainer
AsaNTCheckDynamicDiskOnContainer
AsaNTCheckFTDiskOnContainer
AsaNTGetByContainer
AsaNTLinkForContainer
AsaNewFailoverSpace
AsaNewFailoverSpaceByUniqueCtrID
AsaNewGetDiskSasPhyInfo
AsaNvram
AsaOnlineControllerDiagnostic
AsaOnlineDiskDiagnostic
AsaOpenAdapter2A
AsaOpenAdapter2W
AsaOpenAdapterA
AsaOpenAdapterW
AsaParseAdapterName
AsaPauseResumeIo
AsaPauseResumeIoStatus
AsaPauseResumeIoStatusEx
AsaPollForEvent
AsaPrepareCtrForChange
AsaPrepareCtrForRemoval
AsaProtectStorageDeviceSet
AsaRefreshSupportedRAIDFeatures
AsaRegisterGeneralCallback
AsaReleaseContainerCache
AsaResetController
AsaResetControllerStatsCounters
AsaResetNvramEventLog
AsaResetScsiBus
AsaResetScsiBusEx
AsaRunHardwareDiagnosticTest
AsaSendATACommand
AsaSendReceiveFib
AsaSendSMPCommand
AsaSendScsiCommand
AsaSetAutomaticFailover
AsaSetConnectorFunctionalMode
AsaSetControllerDeviceCachePolicy
AsaSetControllerStats
AsaSetCopyback
AsaSetDDRCachePreservation
AsaSetDefaultLDTaskPriority
AsaSetDirtyPageThresholdValue
AsaSetErrorTunableParams
AsaSetErrorTunableProfile
AsaSetFairnessMode
AsaSetFairnessParameters
AsaSetFunctionalMode
AsaSetGlobalMaxSASPhyLinkRate
AsaSetGlobalPhysicalDevicesWriteCachePolicy
AsaSetMaxCacheBgCheck
AsaSetMaxCacheFlushAndFetchRate
AsaSetMaxCacheRWFactor
AsaSetMaxCacheWrite
AsaSetMonitorLogSeverityLevel
AsaSetPCISerdesInfo
AsaSetPMSpinupLimits
AsaSetPMStayAwakePeriod
AsaSetPMUTCToLocalTimeDiff
AsaSetPbsiConfiguration
AsaSetPerformanceMode
AsaSetSPMParameters
AsaSetSataNCQ
AsaSetUiThreadCallBack
AsaSnapshot
AsaStartGetConfig
AsaStartMaxCacheBgCheck
AsaStorageDevice
AsaStorageDevice2
AsaStorageDeviceSetCachePool
AsaTask
AsaUnloadAPI
AsaUpdateFlashImages
AsaValidHostOs
AsaVerifyContainer
AsaVerifyContainer2
AsaVerifyContainerGetInfo
AsaVerifyContainerGetInfo2
AsaWaitForTaskComplete
AtaFinishJob
AtaNotifyAppFilesysChanged
AtaNotifyFormatComplete
AtaUpdateJob
AetFibDebug
Aaos_RemoveDiskDriverLinks
Crash

Sections

.text
Size: 604KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 804KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

eb842ac86186f73eea06f1e518a1bd36

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

setupapi

Exports

Exports

Sections

.text Size: 604KB - Virtual size: 601KB

.rdata Size: 196KB - Virtual size: 194KB

.data Size: 8KB - Virtual size: 24KB

.rsrc Size: 804KB - Virtual size: 801KB

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 604KB - Virtual size: 601KB

.rdata
Size: 196KB - Virtual size: 194KB

.data
Size: 8KB - Virtual size: 24KB

.rsrc
Size: 804KB - Virtual size: 801KB

.reloc
Size: 36KB - Virtual size: 35KB