DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
1 signatures
General
-
Target
Blowfish.dll
-
Size
220KB
-
MD5
77e6810f5c2870c86a49acdc7b2b4ead
-
SHA1
214000ba48040818b4f0d7ff06c4debbb1ae2274
-
SHA256
68e4896b1fc0e5828162fbefe1bfb2cc7a1dd4ac34957b5b0194550e36fe7992
-
SHA512
f5ed8bfa379734d7c1002119d2d20c5b2915d78aa61b2b359732c89c4ac03df8551fea7bf5076e0725eb60ea6a45c93680bace4387bacc14a43a4f605216a554
-
SSDEEP
3072:RA5++Nl3VWZwJl+2YeNd4qXvDeyAQdHBOF33SLsZvrlYoIMn:q+EllWqG0NwNNCLSl7
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Blowfish.dll
Files
-
Blowfish.dll.dll regsvr32 windows:4 windows x86 arch:x86
8738c8be557124ed65a4a89ac76abb7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedDecrement
lstrcpyA
lstrcatA
lstrlenA
WideCharToMultiByte
GetModuleFileNameA
TerminateProcess
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetEnvironmentVariableA
CompareStringW
RtlUnwind
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
InterlockedIncrement
GetCurrentProcess
SetConsoleCtrlHandler
SetHandleCount
GetFileType
GetStartupInfoA
CompareStringA
MultiByteToWideChar
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
VirtualAlloc
SetUnhandledExceptionFilter
IsBadCodePtr
UnhandledExceptionFilter
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
CloseHandle
GetStringTypeA
GetStringTypeW
SetStdHandle
SetFilePointer
LCMapStringA
LCMapStringW
Sleep
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
user32
wsprintfA
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
ole32
StringFromGUID2
Exports
Exports
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ