batmeter[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

batmeter.dll
Size

723KB
MD5

67c1b58706b47eeba4e117ac197289e6
SHA1

14e01f2477cd70a2ea3d50115c2faa99bee545bb
SHA256

9213e55da854563e3a99369a4fad853c0a97241a4f6d93f98444c57adeef89c1
SHA512

da3e0e86ae3ffeadcaae5df4d34903780144661adcf205085fec7f5e122a2e6cc00d16498d701bc6cec52b2cdba71b195554b2954a11a41fbf20aa486bb0cbaa
SSDEEP

6144:o/lhP0LLLCLLeLLL9UXIFw3333333BF3xIH3:otXPIH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
batmeter.dll

Files

batmeter.dll
.dll windows:6 windows x86 arch:x86

b9040d10e359b631d30663f2f1011692

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

batmeter.pdb

Imports

msvcrt

_onexit
_XcptFilter
malloc
free
_initterm
_amsg_exit
_unlock
__dllonexit
_except_handler4_common
memset
_lock

ntdll

EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
WinSqmSetDWORD
EtwTraceMessage

user32

PostMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW
DestroyIcon
GetSystemMetrics
GetDC
LoadImageW
ReleaseDC
LoadStringW
SystemParametersInfoW

gdi32

DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
SetStretchBltMode
StretchBlt
DeleteDC
GetDIBits

kernel32

ReleaseActCtx
CreateActCtxW
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
InterlockedExchange
LoadLibraryExA
InterlockedCompareExchange
FreeLibrary
GetProcAddress
ActivateActCtx
QueueUserWorkItem
WaitForSingleObject
ResetEvent
DeleteCriticalSection
GetCurrentThreadId
GetSystemPowerStatus
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateFileW
lstrcmpW
CreateEventW
DeviceIoControl
WaitForMultipleObjects
GetOverlappedResult
DeactivateActCtx
GetModuleFileNameW
LoadLibraryW
DelayLoadFailureHook
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
DisableThreadLibraryCalls
FormatMessageW
GetTickCount
LocalFree
GetLastError
lstrlenW
LocalAlloc
CloseHandle
SetLastError
CancelIo

Exports

Exports

BatMeterOnDeviceChange
CleanupBatteryData
CreateBatteryData
GetBatMeterIconAnimationState
GetBatMeterIconAnimationTimeDelay
GetBatMeterIconAnimationUpdate
GetBatteryDetails
GetBatteryInfo
GetBatteryStatusText
GetBatteryWorkingState
IsBatteryBad
IsBatteryHealthWarningEnabled
IsBatteryLevelCritical
IsBatteryLevelLow
IsBatteryLevelReserve
PowerCapabilities
QueryBatteryData
SetBatteryHealthWarningState
SetBatteryLevel
SetBatteryWorkingState
SubscribeBatteryUpdateNotification
UnsubscribeBatteryUpdateNotification
UpdateBatteryData
UpdateBatteryDataAsync

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9040d10e359b631d30663f2f1011692

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 18KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 700KB - Virtual size: 699KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 700KB - Virtual size: 699KB

.reloc
Size: 1KB - Virtual size: 1KB