memetality[.]dll

Resubmissions

19/11/2023, 13:13

231119-qgdt2sba2w 3

Sharing

Copy URL Twitter E-mail

General

Target

memetality.dll
Size

34.3MB
MD5

a2f18ec9f1692785f2c9f72f39bff5f9
SHA1

6ca2dde5db4001062eaa5bb33e2b0ff923d49d51
SHA256

bcb7cfeece0022c399031816e3e6fa7ab1dc45b6461292f689abc0345b806076
SHA512

ac8c4fc1a1440a7c5e27c1613cd93bb646e3c1f59dfec6ff67b577895ebdf292d6ffde8403d85e9f29d5878359404e12390e18ccc50db455c7d268e9e2a18b4d
SSDEEP

393216:ioahMafD6BN+zJk56sO0dH5ZXtpKjzw1QxgvLqmNAmjpy:iowMwuBN+zJk56sOOZZXuv4GcLjp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
memetality.dll

Files

memetality.dll
.dll windows:6 windows x86 arch:x86

d9559cf85af3d7fd70fca8dd4b9c6052

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
CreateThread
SizeofResource
VirtualProtect
VirtualAlloc
FindResourceA
LoadLibraryA
LockResource
LoadResource
GetProcAddress
GetCurrentProcessId
AllocConsole
VirtualFree
VirtualQuery
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent

user32

wsprintfA
MessageBoxA

msvcp140

?_Xlength_error@std@@YAXPBD@Z

ws2_32

send
recv
connect

vcruntime140

__std_exception_copy
__current_exception_context
__CxxFrameHandler3
memcpy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
memset
__std_exception_destroy
_except_handler4_common
memmove

api-ms-win-crt-stdio-l1-1-0

freopen_s
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_crt_atexit
_initterm
_initterm_e
_cexit
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_execute_onexit_table

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

Exports

Exports

?time_export@@3IA

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30.3MB - Virtual size: 30.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

d9559cf85af3d7fd70fca8dd4b9c6052

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 3.9MB - Virtual size: 3.9MB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 30.3MB - Virtual size: 30.3MB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 3.9MB - Virtual size: 3.9MB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 30.3MB - Virtual size: 30.3MB

.reloc
Size: 14KB - Virtual size: 14KB