d0b4588a2c2ac678b96fe4d08df57811[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

d0b4588a2c2ac678b96fe4d08df57811.dll
Size

2.2MB
MD5

d0b4588a2c2ac678b96fe4d08df57811
SHA1

2ab03a51d3c659e22de2b5bdb1cea1237b6e9a39
SHA256

de6542fa74721a47a4a04866b604b6633544427c66930c049b76bf5d5c786146
SHA512

1a1033d0bb1bcac3a58fe6e6bb25d986667e094efd88542cacd57741688a43f993ee61aa70181888cc06579601e4d17dea8e4bb7e557da8bc27a7d1863109345
SSDEEP

49152:DfIVu7fSss37iZOKlyyDiK+5M6qeUqiy4Ha:D+u7fSsseZxbr+XqeUqX4Ha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0b4588a2c2ac678b96fe4d08df57811.dll

Files

d0b4588a2c2ac678b96fe4d08df57811.dll
.dll windows:5 windows x86 arch:x86

bc7e59ca22c2d776ec736b2e5691ca67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mprapi

MprAdminMIBServerConnect

lz32

LZSeek
LZCopy
GetExpandedNameW

secur32

ApplyControlToken

urlmon

URLDownloadToFileW

gdi32

ScaleWindowExtEx
StartPage
GetTextExtentPoint32A
SetTextColor
CreateBitmapIndirect
SwapBuffers
GetEnhMetaFileBits
RestoreDC
LineDDA
SetBoundsRect

netapi32

NetLocalGroupEnum

oleaut32

SafeArrayCreate
BSTR_UserMarshal
GetErrorInfo
SafeArrayAccessData
GetRecordInfoFromGuids

wininet

InternetOpenW
InternetAutodialHangup

msvfw32

DrawDibOpen

avifil32

AVIStreamStart

imm32

ImmGetIMEFileNameW

ole32

OleLoadFromStream
CoRevokeInitializeSpy
CreateItemMoniker
CoReleaseServerProcess
OleLockRunning
CoFreeLibrary
GetHGlobalFromILockBytes
CoRevokeClassObject
CoCreateInstance

shlwapi

SHSetValueA
SHDeleteKeyA
StrStrIW
StrRStrIA
SHQueryValueExW
StrRStrIW
SHRegCloseUSKey
PathRenameExtensionW
HashData

crypt32

CryptFindCertificateKeyProvInfo
CryptSIPRemoveSignedDataMsg
CryptUnregisterDefaultOIDFunction
CryptSIPCreateIndirectData
CertGetPublicKeyLength
CryptImportPublicKeyInfo

clusapi

GetClusterResourceNetworkName

winspool.drv

AddJobW
GetPrinterDataExW
SetPrinterDataW

esent

JetUpdate

wintrust

CryptCATCDFEnumAttributes
CryptCATHandleFromStore

winscard

SCardListCardsW
SCardConnectA

msacm32

acmStreamPrepareHeader

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
GetLocaleInfoW
HeapSize
GetCommandLineA
FreeEnvironmentStringsW
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapDestroy
SetStdHandle
HeapCreate
WriteFile
HeapAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
ReadFile
IsValidLocale
EnumSystemLocalesA
VirtualProtect
PulseEvent
GetLongPathNameA
GetCalendarInfoW
SetEvent
LoadLibraryExA
TerminateProcess
InterlockedPopEntrySList
Process32FirstW
OpenMutexA
GetModuleFileNameA
GlobalSize
GetUserDefaultLangID
OutputDebugStringA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FatalAppExitA
HeapFree
Sleep
ExitProcess
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA

pdh

PdhSetDefaultRealTimeDataSource

powrprof

GetCurrentPowerPolicies

rpcrt4

RpcServerRegisterAuthInfoA

advapi32

OpenSCManagerA
EncryptFileW
RegOpenKeyExA
LookupAccountNameW
BuildTrusteeWithObjectsAndSidW
LookupAccountNameA
CryptDestroyKey
SetSecurityDescriptorOwner

shell32

SHLoadNonloadedIconOverlayIdentifiers
ExtractIconExA
SHGetFolderLocation
SHCreateDirectoryExW
SHPathPrepareForWriteW

ntdsapi

DsFreePasswordCredentials
DsQuoteRdnValueW
DsGetDomainControllerInfoW

user32

SetMenuItemBitmaps
BringWindowToTop
GetKeyboardLayoutNameA
IsCharAlphaW
FlashWindowEx
LoadAcceleratorsW
DlgDirSelectComboBoxExW
SetKeyboardState
GetShellWindow
LoadImageW
GetThreadDesktop
SendInput
CreateMenu
GetIconInfo
DrawTextA
CreateWindowExA
MapVirtualKeyW
GetUpdateRgn

winmm

midiStreamRestart
mmioRead
waveOutMessage

iphlpapi

NotifyRouteChange

mscms

CloseColorProfile

setupapi

CM_Get_Device_ID_ExA
CM_Get_Resource_Conflict_DetailsW
SetupDiInstallDevice
SetupDiGetClassDescriptionExW
SetupDiRegisterCoDeviceInstallers
SetupDiGetClassDescriptionW
CM_Get_Class_Name_ExW
SetupDiGetClassDescriptionExA

comdlg32

CommDlgExtendedError

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc7e59ca22c2d776ec736b2e5691ca67

Headers

DLL Characteristics

File Characteristics

Imports

mprapi

lz32

secur32

urlmon

gdi32

netapi32

oleaut32

wininet

msvfw32

avifil32

imm32

ole32

shlwapi

crypt32

clusapi

winspool.drv

esent

wintrust

winscard

msacm32

kernel32

pdh

powrprof

rpcrt4

advapi32

shell32

ntdsapi

user32

winmm

iphlpapi

mscms

setupapi

comdlg32

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 40KB - Virtual size: 47KB

CODE Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 28KB - Virtual size: 25KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 40KB - Virtual size: 47KB

CODE
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 28KB - Virtual size: 25KB