RoleView[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

RoleView.dll
Size

237KB
MD5

585f5ca77f96d2c3aaadefe39c4e70b6
SHA1

170263b3cb3d7247bf4e811d393254910d7aed90
SHA256

d2915ff99e75ccea33d6e4caeab8694126015421700d292d858cfc302068f075
SHA512

b0a73b2672855a80bb2812198ac7bae9e94134ac2f194534d4fafc82f9c6ac2a6dc38429c65ad3e890e8d20b8cb19d0467a40f7e75d01201e985ef54d61841ef
SSDEEP

6144:H6pebsbV7QeNobC/o0qxs4UVIU/WLmk0Hh3U9C2OKG0nCw:H6pegbZNZ/LC5SU9Ci

Score

1^/10

Malware Config

Signatures

Files

RoleView.dll
.dll windows:5 windows x86 arch:x86

25f21ed57bf97822abf1e9c34ef164e6

Code Sign

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:de
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

02/04/2019, 00:00

Not After

05/04/2022, 12:00

Subject

CN=Fujian NetDragon Computer Network Information Technology Co.\,Ltd,OU=Research and development department,O=Fujian NetDragon Computer Network Information Technology Co.\,Ltd,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9d:29:14:a6:7b:dd:c1:c3:81:4a:6e:62:26:4c:9e:35:7b:4a:94:70
Signer

Actual PE Digest

9d:29:14:a6:7b:dd:c1:c3:81:4a:6e:62:26:4c:9e:35:7b:4a:94:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\MyCode\Release\春节嘉年华\VS2008_Proj\Bin\Release_DX9\RoleView.pdb

Imports

basecode

?LogMsg@@YAXPBDZZ
??1CMyString@@UAE@XZ
?format@CMyString@@QAAXPBDZZ
??0CMyString@@QAE@XZ
?TestSoundFormat@@YA_NPBD@Z
??1CProfile@@QAE@XZ
??0CProfile@@QAE@PBD_N@Z
?ErrorMsg@@YAXPBDZZ
?TimeGet@@YAKXZ
?SafeSprintf@@YA_NPADHPBDZZ
?DebugMsg@@YAXPBDZZ
?Split@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@D@Z
?DumpFuncAddress@@YAPAEHPADPAU_EXCEPTION_POINTERS@@@Z
?SafeStrcpy@@YAXPADPBDH@Z
?RandGet@@YAHHH@Z
?IniDataGet@@YAHPBD00AAHH@Z

role3d

Simple3DObjCreate
I3DRoleCreate
Game3DEffectCreate

graphic

?Show3DBox@CMyBitmap@@SAXABUD3DXVECTOR3@@0K_N@Z
?TimeGetTime@@YAKXZ
?GameCameraGetPos@CMyBitmap@@SAXAAM00K@Z
?PrepareModel@CMyBitmap@@SAXXZ
?ClearBuffer@CMyBitmap@@SA_N_N0K@Z
?GameCameraIsProject@CMyBitmap@@SA_NXZ
MyBitmapCreateEx
?GetScreenWidth@CMyBitmap@@SAHXZ
?GetScreenHeight@CMyBitmap@@SAHXZ
?GameCameraSet@CMyBitmap@@SAXMMMK@Z
?Common_Scale@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?Common_Rotate@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?Common_Translate@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?ScrRayBuild@CMyBitmap@@SAXHHAAUD3DXVECTOR3@@0@Z
MultiBmpCreate
MyBitmapCreateFromTargetBmp
TargetBmpCreateEx
?GameCameraBuild@CMyBitmap@@SAXHH@Z

kernel32

InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter

graphicdata

GameDataSetQuery

gamedata

?RoleDataQuery@@YAAAVC3DRoleData@@XZ
RoleDataQueryEx
?GET_3D_MOTION@@YAPAVC3DMotion@@PBD_JKK@Z

c3sound

?DXPlaySound@@YAPBVCSound@@PBDHHHH0_N@Z

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

msvcr90

_encoded_null
_initterm
_initterm_e
strncmp
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??3@YAXPAX@Z
memset
??_V@YAXPAX@Z
??0exception@std@@QAE@XZ
atoi
_invalid_parameter_noinfo
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
memmove_s
_purecall
memcpy
free
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_amsg_exit

d3dx9_43

D3DXMatrixRotationY
D3DXMatrixRotationX
D3DXMatrixScaling
D3DXMatrixInverse
D3DXVec3TransformCoord
D3DXVec3TransformNormal
D3DXBoxBoundProbe
D3DXMatrixMultiply

Exports

Exports

??0CPlayStrategy@@QAE@ABV0@@Z
??0CPlayStrategy@@QAE@XZ
??0CPlayStrategy_Loop@@QAE@ABV0@@Z
??0CPlayStrategy_Loop@@QAE@XZ
??0CPlayStrategy_Random@@QAE@ABV0@@Z
??0CPlayStrategy_Random@@QAE@XZ
??0CPlayStrategy_Sequence@@QAE@ABV0@@Z
??0CPlayStrategy_Sequence@@QAE@XZ
??0CPlayStrategy_StrictLoop@@QAE@ABV0@@Z
??0CPlayStrategy_StrictLoop@@QAE@ABV?$vector@KV?$allocator@K@std@@@std@@@Z
??0CPlayStrategy_TimeLoop@@QAE@ABV0@@Z
??0CPlayStrategy_TimeLoop@@QAE@K@Z
??0CTargetBmpCache@@QAE@ABV0@@Z
??0CTargetBmpCache@@QAE@XZ
??1CPlayStrategy@@QAE@XZ
??1CPlayStrategy_Loop@@QAE@XZ
??1CPlayStrategy_Random@@QAE@XZ
??1CPlayStrategy_Sequence@@QAE@XZ
??1CPlayStrategy_StrictLoop@@QAE@XZ
??1CPlayStrategy_TimeLoop@@QAE@XZ
??1CTargetBmpCache@@UAE@XZ
??4CPlayStrategy@@QAEAAV0@ABV0@@Z
??4CPlayStrategy_Loop@@QAEAAV0@ABV0@@Z
??4CPlayStrategy_Random@@QAEAAV0@ABV0@@Z
??4CPlayStrategy_Sequence@@QAEAAV0@ABV0@@Z
??4CPlayStrategy_StrictLoop@@QAEAAV0@ABV0@@Z
??4CPlayStrategy_TimeLoop@@QAEAAV0@ABV0@@Z
??4CTargetBmpCache@@QAEAAV0@ABV0@@Z
??_7CPlayStrategy@@6B@
??_7CPlayStrategy_Loop@@6B@
??_7CPlayStrategy_Random@@6B@
??_7CPlayStrategy_Sequence@@6B@
??_7CPlayStrategy_StrictLoop@@6B@
??_7CPlayStrategy_TimeLoop@@6B@
??_7CTargetBmpCache@@6B@
?CheckClientCanSupportTargetBmpWithAlpha@CTargetBmpCache@@QAEXXZ
?Create@CTargetBmpCache@@AAEPAVCTargetBmp@@ABUC3_SIZE@@@Z
?GetMyBitmap@CTargetBmpCache@@QAEPAVCMyBitmap@@ABUC3_SIZE@@@Z
?GetNextActionIndex@CPlayStrategy_Loop@@UAEHABV?$vector@KV?$allocator@K@std@@@std@@H@Z
?GetNextActionIndex@CPlayStrategy_Random@@UAEHABV?$vector@KV?$allocator@K@std@@@std@@H@Z
?GetNextActionIndex@CPlayStrategy_Sequence@@UAEHABV?$vector@KV?$allocator@K@std@@@std@@H@Z
?GetNextActionIndex@CPlayStrategy_StrictLoop@@UAEHABV?$vector@KV?$allocator@K@std@@@std@@H@Z
?GetNextActionIndex@CPlayStrategy_TimeLoop@@UAEHABV?$vector@KV?$allocator@K@std@@@std@@H@Z
?GetNultiBmp@CTargetBmpCache@@QAEPAVCMultiBmp@@XZ
?GetPlayStrategyType@CPlayStrategy_Loop@@UBE?AW4PLAY_STRATEGY_TYPE@@XZ
?GetPlayStrategyType@CPlayStrategy_Random@@UBE?AW4PLAY_STRATEGY_TYPE@@XZ
?GetPlayStrategyType@CPlayStrategy_Sequence@@UBE?AW4PLAY_STRATEGY_TYPE@@XZ
?GetPlayStrategyType@CPlayStrategy_StrictLoop@@UBE?AW4PLAY_STRATEGY_TYPE@@XZ
?GetPlayStrategyType@CPlayStrategy_TimeLoop@@UBE?AW4PLAY_STRATEGY_TYPE@@XZ
?GetTargetBmp@CTargetBmpCache@@QAEPAVCTargetBmp@@ABUC3_SIZE@@@Z
?HaveTargetBmp@CTargetBmpCache@@QAE_NABUC3_SIZE@@@Z
?IsCanSupportTargetBmpWithAlpha@CTargetBmpCache@@QAE_NXZ
?QueryTargetBmpCache@@YAPAVCTargetBmpCache@@XZ
?Release@CTargetBmpCache@@QAEXABUC3_SIZE@@@Z
?Release@CTargetBmpCache@@QAEXXZ
?SetActionLoopNum@CPlayStrategy_StrictLoop@@QAEXABV?$vector@KV?$allocator@K@std@@@std@@@Z
?s_pMultiBmp@CTargetBmpCache@@2PAVCMultiBmp@@A
RoleActionControlerCreate
RoleViewCreate

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25f21ed57bf97822abf1e9c34ef164e6

Code Sign

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:deCertificate

Extended Key Usages

Key Usages

9d:29:14:a6:7b:dd:c1:c3:81:4a:6e:62:26:4c:9e:35:7b:4a:94:70Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

basecode

role3d

graphic

kernel32

graphicdata

gamedata

c3sound

msvcp90

msvcr90

d3dx9_43

Exports

Exports

Sections

.text Size: 187KB - Virtual size: 187KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 11KB - Virtual size: 11KB

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:de
Certificate

9d:29:14:a6:7b:dd:c1:c3:81:4a:6e:62:26:4c:9e:35:7b:4a:94:70
Signer

.text
Size: 187KB - Virtual size: 187KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 11KB - Virtual size: 11KB