sndfile[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

sndfile.dll
Size

2.1MB
MD5

7107b5073214c37e0a91dac25917fdec
SHA1

96d7bd8d5a16b7051c5a019242f2c693fec9dd8a
SHA256

7ed08b17d57bd044464fdc81b4d42ff96c6a983d15037a185e6be8232d6cbdc7
SHA512

1ad10306f3ac758ff96d6d6b7680c6c3987a849992cf416f4f62274e9f5e1f05f9670eb9f14745db7331ea33229305de55f2c89a0e3c5b84324c87b00a0116b6
SSDEEP

49152:bIgcyXnPtlDlqdry77uil9gLRc1cQsd0Ux1pJzzu+y/AP2V:Egc2VlDAA770uT/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sndfile.dll

Files

sndfile.dll
.dll windows:6 windows x86

8f026647bf1bbf46942710a73a83a50e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EncodePointer
HeapSize
GetStdHandle
CreateFileW
FlushFileBuffers
GetFileSizeEx
GetFileType
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
CloseHandle
GetLastError
LocalFree
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
FindClose
FindNextFileW
GetProcAddress
GetStringTypeW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
WriteConsoleW
RaiseException
SetStdHandle
GetFileAttributesExW
DeleteFileW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
HeapReAlloc
DecodePointer
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap

Exports

Exports

sf_close
sf_command
sf_current_byterate
sf_error
sf_error_number
sf_error_str
sf_format_check
sf_get_chunk_data
sf_get_chunk_iterator
sf_get_chunk_size
sf_get_string
sf_next_chunk_iterator
sf_open
sf_open_fd
sf_open_virtual
sf_perror
sf_read_double
sf_read_float
sf_read_int
sf_read_raw
sf_read_short
sf_readf_double
sf_readf_float
sf_readf_int
sf_readf_short
sf_seek
sf_set_chunk
sf_set_string
sf_strerror
sf_version_string
sf_wchar_open
sf_write_double
sf_write_float
sf_write_int
sf_write_raw
sf_write_short
sf_write_sync
sf_writef_double
sf_writef_float
sf_writef_int
sf_writef_short

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 857KB - Virtual size: 857KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f026647bf1bbf46942710a73a83a50e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 857KB - Virtual size: 857KB

.data Size: 21KB - Virtual size: 213KB

.rodata Size: 512B - Virtual size: 432B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 39KB - Virtual size: 38KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 857KB - Virtual size: 857KB

.data
Size: 21KB - Virtual size: 213KB

.rodata
Size: 512B - Virtual size: 432B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 39KB - Virtual size: 38KB