appverifUI[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

appverifUI.dll
Size

109KB
MD5

b5f112ebb8d0608ec9d03841f66ccb89
SHA1

dc15c0fa62d4d5df4da4851e9b51d20f2935b417
SHA256

77b797e6529bade4d6e5611589c6b382dcd266ca7b7a2573613b95dab92fef52
SHA512

98a3656c2939f1f481d645cd96e1b71c223fbcb84aec6aadb181b94d9287ba586b423b549393eb3977c674946f54955ccbea04220756dc88ec14f37d1be59778
SSDEEP

1536:O+RnvUq3pIr/E2S329ffBuEiVGkmWxmLhvzIYzM:O+RsqCI33+fBiVGkmamVvzpY

Score

1^/10

Malware Config

Signatures

Files

appverifUI.dll
.dll windows:10 windows x86 arch:x86

abc97200694ace201ccab92a27f735a0

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:0b:9e:13:4f:d1:23:63:71:8f:1d:ee:43:cf:db:08:d4:d9:32:2e:78:58:66:36:59:13:c5:ea:99:fe:bc:23
Signer

Actual PE Digest

c4:0b:9e:13:4f:d1:23:63:71:8f:1d:ee:43:cf:db:08:d4:d9:32:2e:78:58:66:36:59:13:c5:ea:99:fe:bc:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

appverifUI.pdb

Imports

msvcrt

exit
wcschr
fputws
_except_handler4_common
__CxxFrameHandler3
_vsnprintf
__iob_func
??1type_info@@UAE@XZ
printf
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
_initterm
free
_amsg_exit
_XcptFilter
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
memmove
memcpy
_CxxThrowException
_callnewh
malloc
_purecall
_wcsicmp
_vsnwprintf
_wcstoui64
wcstoul
??_V@YAXPAX@Z
??3@YAXPAX@Z
_onexit
memset

ntdll

RtlAllocateHeap
RtlFreeHeap
RtlInitUnicodeString
RtlInitializeCriticalSection
RtlEnterCriticalSection
RtlLeaveCriticalSection
NtQueryValueKey

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameW

kernel32

CreateProcessW
GetModuleFileNameW
GetShortPathNameW
MapViewOfFile
CreateFileMappingW
WideCharToMultiByte
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
UnmapViewOfFile
CreateFileW
WriteFile
GetFileSizeEx
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileW
FindNextFileW
LockFile
SetFilePointer
InitializeCriticalSectionEx
FindClose
DeleteFileW
GetModuleHandleExW
IsWow64Process
GetCurrentProcess
GetSystemWow64DirectoryW
OpenProcess
CloseHandle
GetLastError
CompareFileTime
GetEnvironmentVariableW
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
DeleteCriticalSection
UnlockFile
EnterCriticalSection
LeaveCriticalSection

user32

EnableWindow
GetDlgItem
CallWindowProcW
SendMessageW
SetWindowLongW
SetFocus
EndDialog
DialogBoxParamW
GetCursorPos
ScreenToClient
GetMenu
DestroyWindow
PostQuitMessage
GetParent
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
ShowWindow
GetClientRect
LoadBitmapW
GetSubMenu
DestroyMenu
ClientToScreen
TrackPopupMenu
CreateWindowExW
CheckDlgButton
GetWindowTextW
IsDlgButtonChecked
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
UpdateWindow
SetClassLongW
CheckMenuItem
CheckRadioButton
SendDlgItemMessageW
LoadCursorW
SetCursor
IsWindowEnabled
LoadIconW
SetMenu
LoadMenuW
DispatchMessageW
SetWindowTextW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
MessageBoxW
LoadStringW
CreateDialogParamW
EnableMenuItem

gdi32

CreateFontIndirectW
DeleteObject

ole32

CoUninitialize
CoInitialize

comctl32

ImageList_Create
ImageList_GetImageCount
ImageList_Add
InitCommonControlsEx

shell32

ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

vrfcore

VerifierOpenLayerProperties
VerifierCloseLayerProperties
VerifierCreateLayerProperties
VerifierSetLayerProperty
VerifierQueryRegisteredLayers
VerifierEnableLayer
VerifierDisableLayer
VerifierQueryLayerBreaks
VerifierQueryLayerProperties
VerifierSetLayerBreak
VerifierIsLayerEnabled
VerifierDisableVerifier
VerifierGetLoggingDirectory
VerifierQueryLayerProperty

uxtheme

OpenThemeData
GetThemeSysFont

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

RegEnumKeyExW
RegCloseKey
RegOpenKeyExW

dbghelp

SymCleanup
SymGetSymFromAddr64
SymSetOptions
SymGetModuleInfo64
SymGetLineFromAddr64
SymRegisterCallback64
SymLoadModule64
SymInitialize
SymUnloadModule64

Exports

Exports

DisplayMessageBoxW
StartUI

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

abc97200694ace201ccab92a27f735a0

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

c4:0b:9e:13:4f:d1:23:63:71:8f:1d:ee:43:cf:db:08:d4:d9:32:2e:78:58:66:36:59:13:c5:ea:99:fe:bc:23Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

psapi

kernel32

user32

gdi32

ole32

comctl32

shell32

comdlg32

vrfcore

uxtheme

version

advapi32

dbghelp

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.data Size: 512B - Virtual size: 6KB

.idata Size: 6KB - Virtual size: 5KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 4KB

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

c4:0b:9e:13:4f:d1:23:63:71:8f:1d:ee:43:cf:db:08:d4:d9:32:2e:78:58:66:36:59:13:c5:ea:99:fe:bc:23
Signer

.text
Size: 75KB - Virtual size: 74KB

.data
Size: 512B - Virtual size: 6KB

.idata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 4KB