glu32[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

glu32.dll
Size

239KB
MD5

3e8efb655af7643a48798368c009dc74
SHA1

4178bf162b2e03cb50c228721a43a9dcd2c314ca
SHA256

279d736276599731271dcb5c27e1869f2b340049df1382876cae95e9254f155f
SHA512

d26b23c8bfd2c740ac33df6d1d7d610468b55f3c1eee2bdcbac174489fa03df404313e12f789df3cda8984585e8f06c544af3169933145fb9e1569a896d4cda7
SSDEEP

6144:IKz1SHucQdsj/wxqSVLvlKeNa8dVGFso6IHyioC+IgovS+bi4iB:pRcQdsj/ivlKeNLfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
glu32.dll

Files

glu32.dll
.dll windows:10 windows x86 arch:x86

16745349e4efc23394c44a57dd7ac7f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

glu32.pdb

Imports

msvcrt

_callnewh
free
malloc
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
_CxxThrowException
__CxxFrameHandler3
longjmp
floor
sin
cos
sqrt
strstr
fabs
_XcptFilter
_ftol2_sse
_except_handler4_common
??1type_info@@UAE@XZ
_initterm
_amsg_exit
memcpy
memset
_setjmp3

kernel32

GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
LocalReAlloc
GetModuleHandleA
lstrlenA
lstrlenW
DebugBreak
LocalFree
LocalAlloc

user32

LoadStringA
LoadStringW

opengl32

glOrtho
glMultMatrixf
glScalef
glTranslatef
glMultMatrixd
glTranslated
glGetString
glNormal3f
glTexCoord2f
glVertex3f
glGetError
glPixelStorei
glTexImage2D
glTexImage1D
glGetIntegerv
glGetFloatv
glEvalMesh2
glMap2f
glEvalCoord2f
glMapGrid2d
glPolygonMode
glEvalPoint2
glPushAttrib
glDisable
glEvalMesh1
glEvalCoord1f
glPopAttrib
glBegin
glEnd
glMap1f
glEnable
glMapGrid1f

Exports

Exports

gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D
gluPartialDisk
gluPerspective
gluPickMatrix
gluProject
gluPwlCurve
gluQuadricCallback
gluQuadricDrawStyle
gluQuadricNormals
gluQuadricOrientation
gluQuadricTexture
gluScaleImage
gluSphere
gluTessBeginContour
gluTessBeginPolygon
gluTessCallback
gluTessEndContour
gluTessEndPolygon
gluTessNormal
gluTessProperty
gluTessVertex
gluUnProject

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16745349e4efc23394c44a57dd7ac7f5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

opengl32

Exports

Exports

Sections

.text Size: 211KB - Virtual size: 211KB

.data Size: 18KB - Virtual size: 19KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 211KB - Virtual size: 211KB

.data
Size: 18KB - Virtual size: 19KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB