20210610_id068aa[.]dll

Resubmissions

23/04/2024, 09:24

240423-lc29mafb3s

11/06/2021, 06:43

210611-ghq6ysb75j10

10/06/2021, 19:21

210610-vfygj4t1yn10

Sharing

Copy URL Twitter E-mail

General

Target
20210610_id068aa.dll
Size 460KB
Sample240423-lc29mafb3s
SHA256 87402c2ee3595cd862dbb82648aa9ebf17d41ceb05f912e50493d9ba96acb9a4
MD5 d79ab901b334ecfec1320778fdd507c5
SHA1 1c273f4e329c5527625a75fcb9488522e9c555e0
SHA512 7505d65c9b81752a13dc1df1e0226173deb5e7caf22fb1a3a3131770c5853667c1989a4f3acb8e5035575ee77fa342ee855e277f639a700e5210424908f6c267
SSDEEP 12288:ctDlVPn5ZvJvxc3DmEAdLXcppE/XhtvWQ:8n5Z/E5kPhtvWQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20210610_id068aa.dll

File Explorer

20210610_id068aa.dll

.dll 460KB

20210610_id068aa.dll

IMPHASH 138b75389ce3822d86ad7f6cfbebc40d
SHA256 87402c2ee3595cd862dbb82648aa9ebf17d41ceb05f912e50493d9ba96acb9a4
MD5 d79ab901b334ecfec1320778fdd507c5
SHA1 1c273f4e329c5527625a75fcb9488522e9c555e0
SHA512 7505d65c9b81752a13dc1df1e0226173deb5e7caf22fb1a3a3131770c5853667c1989a4f3acb8e5035575ee77fa342ee855e277f639a700e5210424908f6c267
SSDEEP 12288:ctDlVPn5ZvJvxc3DmEAdLXcppE/XhtvWQ:8n5Z/E5kPhtvWQ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

48245

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ntdll

RtlUnwind _stricmp atoi _wcsicmp NtClearEvent _alloca_probe _ftol strrchr

kernel32

HeapAlloc GetCommandLineA RaiseException HeapFree ExitProcess TerminateProcess HeapSize HeapReAlloc GetACP GetTimeZoneInformation HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetProfileStringA MulDiv lstrlenA GetModuleFileNameA GetCurrentProcess LoadLibraryA GetProcAddress GetModuleHandleA lstrcpyA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA lstrcmpiA GlobalGetAtomNameA GetCurrentThreadId lstrcatA GetVersion LockResource LoadResource FindResourceA FreeLibrary SetLastError GlobalUnlock GlobalLock GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA FindFirstFileA InterlockedIncrement InterlockedDecrement WideCharToMultiByte MultiByteToWideChar lstrcpynA LocalFree FormatMessageA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA DuplicateHandle GetThreadLocale SizeofResource WritePrivateProfileStringA GetOEMCP GetCPInfo GetProcessVersion GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection GetCurrentThread TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc GetLastError GlobalFree CloseHandle GlobalAlloc lstrcmpA

user32

CharNextA CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep InvalidateRect CharUpperA RegisterClipboardFormatA PostThreadMessageA LoadCursorA GetDesktopWindow GetClassNameA MapDialogRect SetWindowContextHelpId EndDialog CreateDialogIndirectParamA GetMessageA TranslateMessage GetActiveWindow ValidateRect SetCursor PostQuitMessage GetCursorPos WindowFromPoint GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ClientToScreen GetMenuCheckMarkDimensions GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetNextDlgTabItem IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA LoadIconA UpdateWindow SendDlgItemMessageA PeekMessageA DispatchMessageA SetActiveWindow SetFocus AdjustWindowRectEx ScreenToClient CopyRect IsWindowVisible GetTopWindow MessageBoxA IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetDlgItem GetWindowTextLengthA GetWindowTextA GetDlgCtrlID GetKeyState DefWindowProcA DestroyWindow CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow SetForegroundWindow GetWindow SetWindowLongA SetWindowPos RegisterWindowMessageA LoadStringA DestroyMenu GetSysColorBrush OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics ShowWindow EnableWindow GetWindowLongA PostMessageA SendMessageA ReleaseCapture PtInRect SetCapture GetClientRect InflateRect GetFocus IsWindow GetWindowRect GetParent MapWindowPoints RedrawWindow GetSysColor LoadBitmapA GetDC ReleaseDC IsWindowUnicode DefDlgProcA DrawFocusRect ExcludeUpdateRgn ShowCaret HideCaret

gdi32

SaveDC RestoreDC SelectObject GetStockObject SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect MoveToEx LineTo GetViewportExtEx GetWindowExtEx CreatePen ExtCreatePen CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetMapMode PatBlt DPtoLP GetTextColor GetBkColor LPtoDP DeleteDC CreateBitmap SetBkColor SetTextColor GetClipBox StretchDIBits GetObjectA GetDIBits CreateCompatibleDC GetDeviceCaps GetTextExtentPointA BitBlt DeleteObject CreateDIBitmap CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegCloseKey RegSetValueExA RegOpenKeyExA RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleUninitialize OleInitialize CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRevokeClassObject OleIsCurrentClipboard CoTaskMemAlloc OleFlushClipboard

olepro32

ord253

oleaut32

SysAllocStringByteLen SysStringLen SysAllocString VariantChangeType VariantCopy VariantTimeToSystemTime VariantClear SysAllocStringLen SysFreeString OleLoadPicturePath

Name

.text

Size

140KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

240KB

Virtual Size

237KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

20210610_id068aa.dll

ntdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

generic