DataThread[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

DataThread.dll
Size

19KB
MD5

a39fc3179d98b65f0c24913378e13508
SHA1

f02754c5153c637a5cdcfca160648e146ba70507
SHA256

82d1aabf4e8796e083cb42f7cc6459a22382fe97e825f361152aa9260854dcea
SHA512

ba0837b8829a05410e257ea136530eb19d82960254da0ef2aec1365b4c26984e88cfeb87db53029f41b3414b3860146498aacf7fdd2dc34531d9ac7a9acd3ca4
SSDEEP

384:bf8zSrq4B1yFH+V1x2FcGWkhAmit3qOROBnPV5/ovGWCyyhws:q74Bu1WkhzCaWOBndJ2Kyyn

Score

1^/10

Malware Config

Signatures

Files

DataThread.dll
.dll windows:5 windows x86 arch:x86

5d2b9baae1f6db314095e387c6bb16a7

Code Sign

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:de
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

02/04/2019, 00:00

Not After

05/04/2022, 12:00

Subject

CN=Fujian NetDragon Computer Network Information Technology Co.\,Ltd,OU=Research and development department,O=Fujian NetDragon Computer Network Information Technology Co.\,Ltd,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

20:7f:f4:f5:16:4b:9c:71:86:0a:d9:48:32:4c:59:9d:70:20:8d:36
Signer

Actual PE Digest

20:7f:f4:f5:16:4b:9c:71:86:0a:d9:48:32:4c:59:9d:70:20:8d:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetThreadPriority
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForMultipleObjects
ResumeThread
CreateThread
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
GetSystemTimeAsFileTime
EncodePointer

msvcp100

?_Xlength_error@std@@YAXPBD@Z
??1_Container_base12@std@@QAE@XZ

msvcr100

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_malloc_crt
__CxxFrameHandler3
memmove
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_initterm_e
_encoded_null
_initterm
free

Exports

Exports

DataThreadAllocTLSKey
DataThreadCreateNew
DataThreadFreeTLSKey
DataThreadGetAppID
DataThreadSetAppID
GetC3BuiltTime
GetC3SrcUrlStr
GetC3VersionStr

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d2b9baae1f6db314095e387c6bb16a7

Code Sign

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:deCertificate

Extended Key Usages

Key Usages

20:7f:f4:f5:16:4b:9c:71:86:0a:d9:48:32:4c:59:9d:70:20:8d:36Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp100

msvcr100

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1000B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 900B

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:de
Certificate

20:7f:f4:f5:16:4b:9c:71:86:0a:d9:48:32:4c:59:9d:70:20:8d:36
Signer

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1000B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 900B