AddressParser[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

AddressParser.dll
Size

53KB
MD5

fd8e20dc6d1b82846e68e662d6809f91
SHA1

075c6b7cbd916ffba7831e56ae09ac46157d9e75
SHA256

94f803250d907e0be5522f0ad67ee86008958776ea768f7ef90bd643617d3cd0
SHA512

53646cd1405b64414fbaa19742ec9e45c9c66e1d3ddb88db752b56021aac3d3a4be627855b78a24589981a57c62123f3e0e60da0cd4c8af6d3de8c8de05b72ec
SSDEEP

768:gv4JahFMQUmxHqE31I2gIDw3VEy86+n10IODswHGsffb9SMIpVUdy:/8zkl186+1ROjotpVU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AddressParser.dll

Files

AddressParser.dll
.dll windows:10 windows x86 arch:x86

73962ad773f17178c696e1d6729a77b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

AddressParser.pdb

Imports

msvcrt

_except_handler4_common
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
_callnewh
_purecall
realloc
memmove
free
malloc
wcschr
towupper
memcpy

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-localization-l1-2-1

GetUserDefaultLCID
LCMapStringW
GetLocaleInfoW
GetUserDefaultLangID
GetACP
GetSystemDefaultLangID

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

api-ms-win-core-synch-l1-2-0

DeleteCriticalSection
LeaveCriticalSection
Sleep
InitializeCriticalSection
EnterCriticalSection

api-ms-win-core-libraryloader-l1-2-2

LoadLibraryW

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
LoadStringW

api-ms-win-core-string-l1-1-0

GetStringTypeExW

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-2

TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

Exports

Exports

DestroyAddressParser
GetCity
GetCountryName
GetCountryStringFromIndex
GetFullAddress
GetNewAddressParser
GetPostalCode
GetState
GetStreet
ParseAddress
RebuildAddress
SetCity
SetCountryName
SetFullAddress
SetPostalCode
SetState
SetStreet
UpdateDefCountry

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73962ad773f17178c696e1d6729a77b3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-heap-l2-1-0

api-ms-win-core-localization-l1-2-1

api-ms-win-core-registry-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-libraryloader-l1-2-2

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 45KB

.data Size: 512B - Virtual size: 864B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 46KB - Virtual size: 45KB

.data
Size: 512B - Virtual size: 864B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 2KB - Virtual size: 2KB