desobj[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

desobj.dll
Size

9.4MB
MD5

1b3bf87a34a87ae82c465424c1231286
SHA1

0c68b9756120fc64d317abc8a9dec3b0e58ce6f5
SHA256

9cce60e6c774e05ab32cc1413781d55bbd26aa49151145e659c284f48067b9d2
SHA512

51c26722829c51e97892463a19982829a3f4fa6a3628a1f07df8bdd94b69ab22518377e8873cb9b9a4bd74a4efa83dd46be515b422d0b80e49e84268f0a9a291
SSDEEP

196608:71RDeorBPr93EGJRwsLGtJseg6iGSYnjtG:p9BBPrmGJR5GTsx4G

Score

1^/10

Malware Config

Signatures

Files

desobj.dll
.dll windows:5 windows x86 arch:x86

fb7a7fb7fffa26e701df81bff07f4af8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7f:b2:86:d4:53:b5:c5:7e:8e:09:c9:c9:94:06:8b:9b
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

05/10/2017, 00:00

Not After

04/12/2019, 23:59

Subject

CN=PC SOFT INFORMATIQUE,OU=Quality Assurance,O=PC SOFT INFORMATIQUE,L=MONTPELLIER,ST=Hérault,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:f7:4a:dc:9d:ed:66:1b:fc:1c:c6:fe:79:f5:f1:27:05:bc:57:6e
Signer

Actual PE Digest

0f:f7:4a:dc:9d:ed:66:1b:fc:1c:c6:fe:79:f5:f1:27:05:bc:57:6e

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

B:\source\source.PAD\99998\Release_wdobj_223\WX\Desktop_x86_32\Release\wd230obj.pdb

Imports

mpr

WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW

kernel32

CreateFileW
DeleteFileW
CopyFileW
CreateDirectoryW
GetFileAttributesW
GetTempPathW
GetTempFileNameW
GetFullPathNameW
GetDriveTypeW
CompareStringW
GetTimeZoneInformation
GetUserDefaultLangID
CreateSemaphoreW
ReleaseSemaphore
VirtualQuery
VirtualProtect
GetSystemInfo
DecodePointer
WriteConsoleW
ReadConsoleW
SetErrorMode
HeapSize
GetConsoleMode
GetConsoleCP
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
FindNextFileA
FindFirstFileExA
SetStdHandle
LCMapStringW
GetStdHandle
GetStringTypeW
GetACP
GetModuleFileNameA
ExitProcess
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
RtlUnwind
InterlockedFlushSList
RaiseException
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetFileValidData
SetEndOfFile
FlushFileBuffers
UnlockFileEx
UnlockFile
LockFileEx
LockFile
SetFilePointer
ReadFile
WriteFile
GetVolumeInformationW
GetLogicalDriveStringsW
GetFileInformationByHandle
LocalAlloc
LocalFree
SizeofResource
LockResource
LoadResource
FindResourceW
OutputDebugStringW
GlobalAddAtomW
GetSystemDirectoryW
FindClose
FindNextFileW
FindFirstFileW
WaitNamedPipeW
TerminateProcess
MultiByteToWideChar
ReleaseMutex
CreateEventW
CreateMutexW
WaitForSingleObject
WaitForMultipleObjects
SetEvent
ResetEvent
HeapReAlloc
GlobalReAlloc
CloseHandle
OpenThread
FormatMessageW
GetVersionExW
WideCharToMultiByte
GetDateFormatW
GetSystemTime
GetProfileStringW
GetModuleFileNameW
SetCurrentDirectoryW
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
GetStartupInfoW
GetCurrentDirectoryW
GetCurrentProcess
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
IsBadReadPtr
GetWindowsDirectoryW
Beep
GetProfileIntW
GlobalFree
GlobalSize
GlobalAlloc
GlobalUnlock
GlobalLock
GetCurrentProcessId
IsValidCodePage
GetCommandLineW
GetModuleHandleW
SetLastError
FreeLibrary
GetCurrentThreadId
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
GetLocalTime
GetProcAddress
LoadLibraryW
Sleep
MulDiv
InterlockedIncrement
InterlockedExchangeAdd
GetTickCount
InterlockedDecrement
SetFilePointerEx
LoadLibraryExA

user32

CreateMenu
IsCharAlphaNumericW
IsCharLowerW
IsCharUpperW
keybd_event
CopyImage
SetMenuItemInfoW
IsClipboardFormatAvailable
GetMenuItemCount
GetMenuItemInfoW
GetMenuStringW
SendMessageA
GetDoubleClickTime
DeferWindowPos
GetForegroundWindow
SetScrollRange
CountClipboardFormats
SetCaretPos
GetClassInfoW
ChildWindowFromPointEx
UnionRect
GetScrollInfo
IsChild
CopyRect
CreateWindowExA
RegisterClassW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
DestroyMenu
CheckMenuItem
AppendMenuW
CreatePopupMenu
EnableScrollBar
EnumThreadWindows
GetScrollRange
ScrollWindowEx
GetScrollPos
SetWindowPlacement
SetScrollInfo
CreateIconIndirect
TrackPopupMenu
EnableMenuItem
GetSystemMenu
DefMDIChildProcW
DefFrameProcW
CallWindowProcW
DrawFrameControl
DrawIconEx
InvalidateRgn
GetWindowRgn
LockWindowUpdate
TranslateMDISysAccel
RemoveMenu
ValidateRgn
ScrollDC
GetQueueStatus
GetMessageW
SetForegroundWindow
AllowSetForegroundWindow
SetCursorPos
LoadStringW
FindWindowW
DestroyIcon
MoveWindow
GetClassLongW
GetSubMenu
GetUpdateRgn
SystemParametersInfoW
GetGuiResources
SetClassLongW
MessageBoxW
GetMessagePos
AdjustWindowRectEx
SetRectEmpty
DrawFocusRect
BringWindowToTop
WinHelpW
PostQuitMessage
RegisterWindowMessageW
DrawTextW
GetSysColor
GetClipboardData
RegisterClipboardFormatW
SetFocus
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
GetActiveWindow
SetRect
ReplyMessage
DispatchMessageW
TranslateMessage
UnregisterClassW
GetCursor
ShowScrollBar
SetScrollPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DestroyCursor
SetWindowRgn
EndDeferWindowPos
BeginDeferWindowPos
MessageBeep
SetActiveWindow
EnableWindow
SendMessageTimeoutW
GetUpdateRect
SetCursor
LoadCursorW
PostThreadMessageW
GetWindowThreadProcessId
LoadImageW
LoadIconW
CreateIconFromResourceEx
LoadCursorFromFileW
IsIconic
GetWindowPlacement
InsertMenuItemW
DrawMenuBar
GetMenu
IsCharAlphaW
CharLowerW
CharUpperW
GetKeyboardLayout
SetMenu
InflateRect
ShowCaret
CreateCaret
HideCaret
SubtractRect
EqualRect
GetAsyncKeyState
WindowFromPoint
CreateWindowExW
DestroyWindow
GetCursorPos
IsRectEmpty
DefWindowProcW
IsZoomed
EndPaint
GetClientRect
BeginPaint
GetFocus
GetSystemMetrics
ReleaseCapture
GetCapture
SetCapture
SetWindowTextW
SetParent
InvertRect
OffsetRect
ScreenToClient
SetPropW
RemovePropW
GetPropW
InvalidateRect
PeekMessageW
ShowWindow
SetWindowLongW
GetWindowLongW
GetWindowDC
GetParent
RedrawWindow
ClientToScreen
IntersectRect
GetWindow
SendMessageW
GetWindowRect
IsWindowVisible
ReleaseDC
GetDC
GetDesktopWindow
ValidateRect
SetWindowPos
FillRect
PtInRect
UpdateWindow
IsWindowEnabled
GetKeyState
KillTimer
SetTimer
PostMessageW
IsWindow
InSendMessageEx

gdi32

DeleteObject
BitBlt
CreateCompatibleDC
SelectObject
SaveDC
IntersectClipRect
RestoreDC
GetWindowOrgEx
StretchBlt
GetStockObject
CreateDIBSection
SetLayout
GetLayout
GetCurrentObject
GetObjectW
GetTextExtentPoint32W
GetDeviceCaps
RoundRect
SetBkColor
ExtTextOutW
Rectangle
ExcludeClipRect
MoveToEx
LineTo
SetPixel
GetTextMetricsW
CreateSolidBrush
CreateRectRgnIndirect
CreateCompatibleBitmap
GetSystemPaletteEntries
CreatePalette
CreatePen
GetPixel
SetROP2
SetBkMode
DeleteDC
SetTextColor
CopyMetaFileW
SelectClipRgn
SetStretchBltMode
RectVisible
CreateRectRgn
CombineRgn
OffsetRgn
ExtSelectClipRgn
EqualRgn
GetDIBits
SetDIBits
GetClipBox
GetClipRgn
RectInRegion
GetRgnBox
SelectPalette
RealizePalette
CreateEllipticRgn
GetViewportOrgEx
SetGraphicsMode
GetPaletteEntries
GetBrushOrgEx
SetBrushOrgEx
CreateDIBitmap
CreateFontIndirectW
GetViewportExtEx
GetWindowExtEx
GetCharacterPlacementW
LPtoDP
CreateRoundRectRgn
StretchDIBits
SetDIBitsToDevice
CreatePatternBrush
ExtCreatePen
CreateEnhMetaFileW
CloseEnhMetaFile
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
PlayEnhMetaFile
DeleteEnhMetaFile
CreatePolygonRgn
SetPixelV
CreateBitmap
UnrealizeObject
GetROP2
Polygon
Ellipse
OffsetClipRgn
SetWindowOrgEx

shell32

DragAcceptFiles
ShellExecuteW
DragQueryFileW
SHAppBarMessage
DragQueryPoint

Exports

Exports

?pclCreateFactory@@YGPAUIClassFactory@@XZ
CheckVersion
CommandeComposante
DeclareProxy
Execution
ExternalTermLibrary
InfoComposante
WDTrackPopupMenuLookXP
WLE_DoModal
WLE_bOuvre
WLE_bOuvre2
WLE_hHandle
bExternalInitLibrary
bInitWLCalcFromVM
bInitWLConvFromVM
onXAMLEvent
pQueryProxy

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb7a7fb7fffa26e701df81bff07f4af8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

7f:b2:86:d4:53:b5:c5:7e:8e:09:c9:c9:94:06:8b:9bCertificate

Extended Key Usages

Key Usages

0f:f7:4a:dc:9d:ed:66:1b:fc:1c:c6:fe:79:f5:f1:27:05:bc:57:6eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mpr

kernel32

user32

gdi32

shell32

Exports

Exports

Sections

.text Size: 3.9MB - Virtual size: 3.9MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 51KB - Virtual size: 93KB

.gfids Size: 512B - Virtual size: 224B

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 3.2MB - Virtual size: 3.2MB

.reloc Size: 619KB - Virtual size: 618KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

7f:b2:86:d4:53:b5:c5:7e:8e:09:c9:c9:94:06:8b:9b
Certificate

0f:f7:4a:dc:9d:ed:66:1b:fc:1c:c6:fe:79:f5:f1:27:05:bc:57:6e
Signer

.text
Size: 3.9MB - Virtual size: 3.9MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 51KB - Virtual size: 93KB

.gfids
Size: 512B - Virtual size: 224B

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

.reloc
Size: 619KB - Virtual size: 618KB