shiza[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shiza.dll
Size

3.1MB
MD5

50c8d7a2a9d55f2e1fdbadace74f441e
SHA1

ef56f6238807272a5ae49f169249d5537ed2bd2d
SHA256

cf8d269b34cadf7e6eebcd8ec1b7da74c5e2bb3e906c0ff813aec5ce6ced98ae
SHA512

20ca939dc47bb8dcc1ed950ece65b8fef745c9eeedf4a4cf15c2da52d0d0511ee50eb272b2ba0d66c563fb155df1452c25e5aa4d7061c2cf583e2d666775ca0d
SSDEEP

98304:UtuQrJlLHUm8g6GWbj0JnNgCsIuv4I1pK81NicD:UtuQJv6GA9Cs/VpKSN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shiza.dll

Files

shiza.dll
.dll windows:6 windows x86 arch:x86

e9f33c34083c46b80b14ca02be1d51fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
WideCharToMultiByte
GetTickCount64
GetProcessHeap
IsBadReadPtr
FreeLibraryAndExitThread
CreateThread
DisableThreadLibraryCalls
FindFirstFileA
QueryPerformanceCounter
FindClose
DeleteFileA
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetFileSizeEx
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetCurrentDirectoryW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetProcAddress
QueryPerformanceFrequency
MultiByteToWideChar
FindNextFileA
GetModuleHandleA
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
GetFullPathNameW
GetDriveTypeW
ReadFile
LoadLibraryExW
FreeLibrary
SetLastError
GetLastError
InterlockedFlushSList
RtlUnwind
RaiseException
TlsFree
TlsGetValue
CreateSemaphoreW
TlsAlloc
InitializeCriticalSection
ReleaseSemaphore
TlsSetValue
TerminateProcess
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime

user32

ReleaseCapture
SetCursorPos
GetCursorPos
GetActiveWindow
SetWindowLongA
CallWindowProcA
DefWindowProcA
FindWindowA
ShowCursor
GetWindowRect
GetDesktopWindow
GetAsyncKeyState
GetKeyState
mouse_event
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
IsChild
TrackMouseEvent
GetForegroundWindow
SetCapture
SetCursor
GetClientRect

gdi32

SelectObject
GetTextExtentPointA
DeleteObject
CreateFontA

shell32

SHGetKnownFolderPath

opengl32

glPolygonMode
glPopMatrix
glVertex2f
glVertex2i
glBegin
glColor3f
glEnd
glListBase
glColor4ub
glRasterPos2i
glHint
wglUseFontBitmapsA
glCallLists
glGenLists
wglGetCurrentDC
glColor4f
glDepthFunc
glGetIntegerv
glPushAttrib
glOrtho
glPixelStorei
glShadeModel
glPushMatrix
glDisable
glDrawElements
glTexEnvi
glColorPointer
glTexImage2D
glGetTexEnviv
glTexCoordPointer
glDeleteTextures
glTexParameteri
glLoadIdentity
glBlendFunc
glMatrixMode
glDisableClientState
glScissor
glEnable
glVertexPointer
glGenTextures
glBindTexture
glLineWidth
glPopAttrib
glEnableClientState
glViewport

winmm

timeGetTime

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 489KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9f33c34083c46b80b14ca02be1d51fa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

opengl32

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 489KB - Virtual size: 489KB

.data Size: 10KB - Virtual size: 25KB

.0 Size: 463KB - Virtual size: 463KB

.reloc Size: 54KB - Virtual size: 53KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 489KB - Virtual size: 489KB

.data
Size: 10KB - Virtual size: 25KB

.0
Size: 463KB - Virtual size: 463KB

.reloc
Size: 54KB - Virtual size: 53KB