eappgnui[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

eappgnui.dll
Size

92KB
MD5

6db7ecba34165acb99a1a3c7f739e757
SHA1

93ca37b446d2e5308fedce249ba5954e45ce8764
SHA256

fcaa0bf8fa66f4a6ea1b2285c34fa874970816060515e520a3bc4c1eb0140021
SHA512

943a191b48641f4b1508eb67b059e785dd6830280811a68cc55480c8a54f65932f0dde71d7e1d308e5aa96bcc12632dbf9bba22f75310e445ebcbc89cd41e03b
SSDEEP

1536:3A+sfjt372sTIm1FAaDJtniGljRe/zInqsMzM3kqWWqyjPm161bOw:5sLtLfTJ1WwBiGl1CInqsMzqkqsyjPMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eappgnui.dll

Files

eappgnui.dll
.dll regsvr32 windows:6 windows x86 arch:x86

941e26011ece5db9c6cb86981bd2c0e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

eappgnui.pdb

Imports

msvcrt

_except_handler4_common
??1type_info@@UAE@XZ
_amsg_exit
_initterm
_unlock
__dllonexit
wcsrchr
memmove
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
memmove_s
_CxxThrowException
memcpy_s
free
malloc
__CxxFrameHandler3
wcscpy_s
wcscat_s
memcpy
_lock
_onexit
_XcptFilter
memset

ntdll

EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwEventRegister
EtwEventUnregister
DbgPrint
EtwEventWrite
EtwTraceMessage

kernel32

InterlockedExchange
GetVersionExA
GetCurrentProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
DebugBreak
GetCurrentThreadId
Sleep
InterlockedCompareExchange
OutputDebugStringA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemInfo
DisableThreadLibraryCalls
GetLastError
GetModuleHandleW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
SetThreadLocale
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetModuleFileNameW
LocalFree
FormatMessageW
GetSystemDefaultLangID
GetModuleHandleExW
GetVersionExW
GetSystemDirectoryW
HeapSize
InterlockedExchangeAdd
HeapDestroy
HeapCreate
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount

ole32

CoCreateInstance
StringFromGUID2

user32

GetWindowTextW
GetWindowLongW
DialogBoxParamW
UnregisterClassA
EnableWindow
SendMessageW
GetDlgItem
SetWindowLongW
SetWindowTextW
EndDialog

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EapPeerFreeErrorMemory
EapPeerFreeMemory
EapPeerInvokeIdentityUI

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

941e26011ece5db9c6cb86981bd2c0e6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 36KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 45KB - Virtual size: 45KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 37KB - Virtual size: 36KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 45KB - Virtual size: 45KB

.reloc
Size: 5KB - Virtual size: 4KB