Abyss[.]v1[.]4[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Abyss.v1.4.dll
Size

544KB
MD5

eef073e71b5cad9dc4542844966432d2
SHA1

68cfa8e4b5a32070db551800acdcce60e1bd03d9
SHA256

0611808043e4d2a5d0b06e0c01fed62d4c24b8575a829df1e776c744c86a4515
SHA512

0724d41476d26c40472fbe6f2a1355814dc7ef3761f7fcfabae129339a10de7fc109fdd14ec34ed37e54c60fe842775327e358234d11ed824a7aa43295147b1a
SSDEEP

6144:m74m8wLt5JjOLq7Nmw3g371bA7eVmnxx+7eIenu+9WKO2NQ2uT6kBlyr0vci04KR:mF8S5NnIeIm1WKO2NMTLyr0vcP4KHx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Abyss.v1.4.dll

Files

Abyss.v1.4.dll
.dll windows:6 windows x64 arch:x64

024271b18049d063d45f5fa003e360de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

jvm

JNI_GetCreatedJavaVMs

opengl32

glBlendFunc
glMatrixMode
glDisableClientState
glScissor
glVertexPointer
glGenTextures
glBindTexture
glPolygonMode
glPopAttrib
glEnableClientState
glViewport
glPopMatrix
glDisable
glEnable
glPolygonOffset
glTexParameteri
glTexCoordPointer
glGetTexEnviv
glTexImage2D
wglGetCurrentContext
glColorPointer
glTexEnvi
glDrawElements
glPushMatrix
glShadeModel
glPixelStorei
glOrtho
glPushAttrib
glGetIntegerv
glLoadIdentity
wglCreateContext
glClearColor
wglMakeCurrent
glDepthFunc
wglDeleteContext

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
IsProcessorFeaturePresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
TerminateProcess
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
InitOnceComplete
InitOnceBeginInitialize
RtlCaptureContext
GetPriorityClass
CreateThread
DisableThreadLibraryCalls
SetPriorityClass
AllocConsole
FreeConsole
SetConsoleTitleA
OpenThread
SetThreadContext
FlushInstructionCache
GetModuleHandleW
GetCurrentProcessId
Sleep
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetLastError
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext

user32

GetAsyncKeyState
SendInput
mouse_event
GetCursorPos
SendMessageA
FindWindowA
GetKeyState
SetForegroundWindow
SetWindowLongPtrA
GetWindowLongPtrA
IsWindowUnicode
ShowWindow
GetSystemMetrics
SetWindowPos
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
SetCursorPos
CallWindowProcA
GetClientRect
SetCursor
SetCapture
WindowFromDC
ClipCursor
LoadCursorA
GetForegroundWindow
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
ReleaseCapture

msvcp140

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?good@ios_base@std@@QEBA_NXZ
_Query_perf_frequency
_Thrd_sleep
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
_Xtime_get_ticks
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Query_perf_counter

imm32

ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

winmm

PlaySoundA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
_CxxThrowException
memset
__std_type_info_destroy_list
strstr
__current_exception
_purecall
__std_exception_copy
__std_exception_destroy
memchr
memcmp
memcpy
__std_terminate
memmove
__C_specific_handler

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
ftell
fclose
freopen_s
fseek
fwrite
__stdio_common_vsscanf
fread
_wfopen
fflush

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_cexit
_crt_atexit
_initterm
terminate
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
system
exit
_seh_filter_dll
abort
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-math-l1-1-0

sqrtf
atan2f
powf
sinf
sqrt
fminf
acosf
ceilf
cosf
fmodf
pow
fmaxf
atan2

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
strcmp

api-ms-win-crt-convert-l1-1-0

atof

Sections

.text
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

024271b18049d063d45f5fa003e360de

Headers

DLL Characteristics

File Characteristics

Imports

jvm

opengl32

kernel32

user32

msvcp140

imm32

winmm

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

Sections

.text Size: 421KB - Virtual size: 421KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 9KB - Virtual size: 11KB

.pdata Size: 18KB - Virtual size: 18KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 421KB - Virtual size: 421KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 9KB - Virtual size: 11KB

.pdata
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB