336e67d9414f386138535ac08fb0aba0ed5e209b6e93e1211e024f95e042ca5d

Sharing

Copy URL

Twitter E-mail

General

Target

336e67d9414f386138535ac08fb0aba0ed5e209b6e93e1211e024f95e042ca5d
Size

208KB
MD5

22ae488c43687efb053cb005cfa17f16
SHA1

90e7bf71e0196797bb67c63d5a39a6301902b989
SHA256

336e67d9414f386138535ac08fb0aba0ed5e209b6e93e1211e024f95e042ca5d
SHA512

10de42ff078703df0aa74dae2879ac127dc7073c2c2cc9900e4b2073f34e5812bfa47b23146114447a6f593eb7d2cb431249e1faca804772e57c53aff2cbe6c7
SSDEEP

3072:osZqmrB85Bz1Gt5+o1a0mQDSZ4OA6UhW6EFJFQBJUCQL:o2qmGBpi5za05DdOA6UhHEFPaJUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
336e67d9414f386138535ac08fb0aba0ed5e209b6e93e1211e024f95e042ca5d

Files

336e67d9414f386138535ac08fb0aba0ed5e209b6e93e1211e024f95e042ca5d
.dll windows:6 windows x86 arch:x86

1e4e67914cfc053a87b78d50a1105321

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

commondatasetbase

?GetModuleDir@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z
?IsFile@File@common@@QBE_NXZ
?IsExist@File@common@@QBE_NXZ
??1File@common@@UAE@XZ
??0File@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CopyLen@StringHelper@common@@YA_NPADIPBDZZ
?GUIDToString@GUIDHelper@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUtag_GUID@2@@Z
?CreateGUID@GUIDHelper@common@@SA_NAAUtag_GUID@2@@Z
?IsValid@Logger@common@@QAE_NXZ
?WriteLog@Logger@common@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?Flush@Logger@common@@QAE_NXZ
??0Logger@common@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?GetInstance@BugChecker@common@@SAAAV12@XZ
?Throw@BugChecker@common@@QAEAAV12@XZ
?SetDumpMark@BugChecker@common@@QAEAAV12@_N@Z
?Assertion@BugChecker@common@@QAEAAV12@PBD00H@Z
?AnsiToUtf8@StringHelper@common@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z

sqlitedingli

sqlite3_column_int64
sqlite3_errmsg
sqlite3_column_int
sqlite3_bind_null
sqlite3_column_blob
sqlite3_column_text
sqlite3_bind_blob
sqlite3_column_count
sqlite3_bind_int
sqlite3_exec
sqlite3_close
sqlite3_bind_int64
sqlite3_bind_text
sqlite3_free
sqlite3_column_bytes
sqlite3_finalize
sqlite3_step
sqlite3_open_v2
sqlite3_prepare_v2

kernel32

DisableThreadLibraryCalls
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
LoadLibraryA
FreeLibrary
GetProcAddress

msvcp110

?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr110

memcpy
_libm_sse2_pow_precise
_libm_sse2_log_precise
__RTDynamicCast
__CxxFrameHandler3
_CxxThrowException
__clean_type_info_names_internal
?terminate@@YAXXZ
_except_handler4_common
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memchr
toupper
_strtoi64
strtol
memset
free
malloc
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_vsnprintf
__CppXcptFilter
_amsg_exit
_malloc_crt

Exports

Exports

AddGroupRootItem
AddRandomDiscreteColor
CheckInterDataSetResourceList
Close
CodeExist
CommitTransaction
ConfigIntProperty
CreateResourceHandle
CreateResourceHandleEx
DeleteCodeGroupItem
DeleteCodeGroupItemEx
DeleteCustomEventStandardInfoItem
DeleteCustomParamStandardInfoItem
DeleteGroupItem
DeleteItem
DeleteThresholdItem
EventStandardInfoExist
FreeResourceHandle
GetBufferValue
GetCodeList
GetCodeListByGroupCode
GetEventStandardName
GetExtraColor
GetFloatValue
GetGroupCodeByCode
GetGroupCodeByCodeEx
GetGroupCodeList
GetGroupName
GetGroupPriority
GetInt64Value
GetIntValue
GetParamStandardInfo
GetParamStandardName
GetParamValueParseMeaning
GetParentGroupCode
GetPriorityByCode
GetPriorityByCodeEx
GetRandomDiscreteColor
GetRandomDiscreteColorCount
GetRootGroupCode
GetRootGroupCodeByGroupCode
GetRootGroupCodeByType
GetRootGroupCustomProperty
GetRootGroupType
GetSPStandardName
GetSameGroupUnitCodeList
GetThresholdCodeList
GetThresholdCount
GetThresholdInfo
GetThresholdItemColor
GetThresholdItemIndexByValue
GetThresholdItemInfo
GetThresholdItemNote
GetThresholdName
GetUnitGroupCode
GetUnitGroupCodeList
GetUnitGroupName
GetUnitName
GetUpdatedResourceCodeLog
GroupCodeExist
IsDataSetResourceCode
ModifyRandomDiscreteColor
Open
ParamStandardInfoExist
ParamThresholdCodeExist
RollbackTransaction
SPStandardInfoExist
SetDataSetResourceFilter
SetMaxCacheCount
StartTransaction
SyncInterDataSetResource
SyncTwoDataSetResource
TranslateUnit
UpdateCodeGroupItem
UpdateCodeGroupItemEx
UpdateCustomEventStandardInfoItem
UpdateCustomGroupItem
UpdateCustomParamStandardInfoItem
UpdateEventItem
UpdateGroupItem
UpdateParamExtendBuffer
UpdateParamItem
UpdateRootGroupCustomProperty
UpdateSPItem
UpdateThresholdBuffer
UpdateThresholdItem

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e4e67914cfc053a87b78d50a1105321

Headers

DLL Characteristics

File Characteristics

Imports

commondatasetbase

sqlitedingli

kernel32

msvcp110

msvcr110

Exports

Exports

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 368B

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 368B

.reloc
Size: 17KB - Virtual size: 17KB