gdiloadting32[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

gdiloadting32.dll
Size

1.0MB
MD5

f7431e73ccdb266a8b0ae9309961ec99
SHA1

013317d3e17cc51170c6446f40154cac03c649d4
SHA256

f0c58f96a0e7a5caa6ece74a16b34462583865a627c3f3e2a1439433b40d3cef
SHA512

f3f36603e2a36fed8e9dbb9d4913aab3ecf009ce2889dc72f9a29193e696410b5084535abb68f76a8a9c1ab0cabc2b05f57b89cdfec78ef5987ec5df45edba1e
SSDEEP

24576:LCPLgDNo5GPeo3FcqMc06VwvPtWm3ogeOfTP:L9x3aBvPom3oR2TP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gdiloadting32.dll

Files

gdiloadting32.dll
.dll windows:6 windows x86 arch:x86

86d68c1b19e6087dab2ae2fe7a595025

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetCurrentProcess
GetVolumeInformationA
IsBadCodePtr
ResumeThread
Sleep
EncodeSystemPointer
CreateThread
GetThreadContext
ExitProcess
FlushInstructionCache
IsBadReadPtr
SetThreadContext
GetTickCount
GetComputerNameA
SetPriorityClass
DeviceIoControl
GetLastError
CreateFileA
GetVersionExA
QueryPerformanceCounter
GlobalLock
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
WideCharToMultiByte
GlobalUnlock
GlobalFree
GlobalAlloc
CloseHandle
MultiByteToWideChar

user32

keybd_event
GetClientRect
LoadCursorA
SetWindowLongA
CallWindowProcA
MessageBoxA
mouse_event
SetRect
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
FindWindowA
GetKeyState
SetCursor
ReleaseCapture
SetCursorPos
SetClipboardData
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetCapture

advapi32

GetUserNameA

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z

d3d9

Direct3DCreate9

imm32

ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmAssociateContextEx

vcruntime140

_CxxThrowException
__std_type_info_destroy_list
_except_handler4_common
memmove
memchr
__current_exception_context
__current_exception
memcpy
memset
strstr
__std_exception_copy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
strchr

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_errno

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
fread
__stdio_common_vsscanf
fseek
_wfopen
ftell
__stdio_common_vsprintf_s
fclose
fflush
fwrite

api-ms-win-crt-string-l1-1-0

isspace
isalnum
tolower
isprint
strncpy
_strdup

api-ms-win-crt-utility-l1-1-0

rand
srand
qsort

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-convert-l1-1-0

strtof

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise
ceil
_libm_sse2_acos_precise
_libm_sse2_cos_precise
_libm_sse2_sin_precise

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 586KB - Virtual size: 30.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86d68c1b19e6087dab2ae2fe7a595025

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcp140

d3d9

imm32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 334KB - Virtual size: 334KB

.rdata Size: 100KB - Virtual size: 100KB

.data Size: 586KB - Virtual size: 30.2MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 334KB - Virtual size: 334KB

.rdata
Size: 100KB - Virtual size: 100KB

.data
Size: 586KB - Virtual size: 30.2MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 20KB - Virtual size: 19KB