AlterNative[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

AlterNative.dll
Size

482KB
MD5

6953e6aaf9018c8376a0899989e71beb
SHA1

4d95a33703545914db2635bc81fcd1b49fa60553
SHA256

cac959b592d2bfdce2e96c0df6b39fc28d985c600492d3ae497b22f1246da15d
SHA512

a045b237fcbe17d4eee397b462056445cd5c94ef6b330b20870ee617f1e049b8f1b8d7a2d2754b2c4c57f039f90e92a172a036b98e660c2936443cbf93159ea1
SSDEEP

12288:l9ej+oOXUPUm0lezCwvh7O5gbY0u2/L6KC0Dmw8q8o6F6uD4KX328kJ:l9ejUwvh7k0u2jC0SXq87X3PkJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AlterNative.dll

Files

AlterNative.dll
.dll windows:6 windows x86 arch:x86

90484c0c0b9ba0fb17feb76dcac34d75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\cheat's\AlNa\new\Release\AlterNative.pdb

Imports

kernel32

lstrlenA
lstrcpynA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcpyA
FreeLibraryAndExitThread
Sleep
DisableThreadLibraryCalls
CreateThread
CreateDirectoryA
IsBadReadPtr
GetCurrentProcess
TerminateProcess
GetModuleHandleA
FlushInstructionCache
GetProcAddress
lstrcmpA
InitializeSListHead
WritePrivateProfileStringA
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
SetLastError
GetPrivateProfileStringA
GetTickCount
VirtualProtect
GetSystemTimeAsFileTime

user32

MessageBoxA
SetWindowLongA
CallWindowProcA
FindWindowA
GetAsyncKeyState
mouse_event
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
SetCapture
GetForegroundWindow
IsChild
GetKeyNameTextA
MapVirtualKeyA
GetKeyState
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen

shell32

ShellExecuteA

msvcp140

?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
_File_size
_Unlink
_Remove_dir
_To_wide
_Close_dir
_Open_dir
_Lstat
_Read_dir
_Stat
_To_byte
?_Xinvalid_argument@std@@YAXPBD@Z
?_Winerror_message@std@@YAKKPADK@Z

opengl32

glDepthFunc
glGetFloatv
glPopMatrix
glViewport
glEnableClientState
glPopAttrib
glPolygonMode
glBindTexture
glGenTextures
glVertexPointer
glEnable
glScissor
glDisableClientState
glMatrixMode
glBlendFunc
glLoadIdentity
glTexParameteri
glDeleteTextures
glTexCoordPointer
glTexImage2D
glColorPointer
glDrawElements
glDisable
glPushMatrix
glPixelStorei
glOrtho
glTexEnvi
glGetIntegerv
glDepthRange
glLineWidth
glClearColor
glPushAttrib

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

vcruntime140

_except_handler4_common
_CxxThrowException
__current_exception_context
__current_exception
memcpy
memset
__std_type_info_compare
__std_exception_copy
__std_exception_destroy
strstr
__std_terminate
memmove
memchr
__CxxFrameHandler3
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_wassert
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
terminate

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-convert-l1-1-0

atof
atoi

api-ms-win-crt-stdio-l1-1-0

ftell
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf
fread
_wfopen
fwrite
fflush
fclose
__stdio_common_vfprintf
fseek

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
_libm_sse2_acos_precise
roundf
_libm_sse2_pow_precise
_libm_sse2_sqrt_precise
_fdclass
_libm_sse2_log10_precise
_libm_sse2_tan_precise
ceil
_libm_sse2_cos_precise
floor
_dclass
_CIfmod
_libm_sse2_atan_precise
_CIatan2

api-ms-win-crt-filesystem-l1-1-0

_access

api-ms-win-crt-time-l1-1-0

strftime
_localtime64
_time64

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-environment-l1-1-0

getenv

Sections

.text
Size: 389KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90484c0c0b9ba0fb17feb76dcac34d75

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

msvcp140

opengl32

imm32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

Sections

.text Size: 389KB - Virtual size: 389KB

.rdata Size: 65KB - Virtual size: 64KB

.data Size: 1KB - Virtual size: 156KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 24KB - Virtual size: 24KB

.text
Size: 389KB - Virtual size: 389KB

.rdata
Size: 65KB - Virtual size: 64KB

.data
Size: 1KB - Virtual size: 156KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 24KB - Virtual size: 24KB