WD230obj[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

WD230obj.dll
Size

9.7MB
MD5

522bbcd84ef7abcebb8e6e02f6e998ef
SHA1

d71890aa610b3c6366cb8e4ffa9126776bbc86a8
SHA256

387e4872d44b4eb96200109390fbfe71b122e395cc80d5ef0179f0b53cb47baa
SHA512

fdd2a0d54d8bd50254aff9863fdaa54922d4d1b36bbf2f7649020da04c8194a5370468ef85cc45e40ff9181bea4902261fc91667b134c065e063cdb00517f3f1
SSDEEP

196608:0BCSDTlrUrsWgd9L1UCdt6+3RHsgw5HxmVUCrtQ:aCmrUrIdrUC6+3y9iHQ

Score

1^/10

Malware Config

Signatures

Files

WD230obj.dll
.dll windows:5 windows x86 arch:x86

5f7ae4c55299a3ee68f3d80411434d8c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7f:b2:86:d4:53:b5:c5:7e:8e:09:c9:c9:94:06:8b:9b
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

05/10/2017, 00:00

Not After

04/12/2019, 23:59

Subject

CN=PC SOFT INFORMATIQUE,OU=Quality Assurance,O=PC SOFT INFORMATIQUE,L=MONTPELLIER,ST=Hérault,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

13:e5:ea:00:a1:27:13:cd:cf:64:a0:07:86:4b:0a:ef:19:0a:07:95
Signer

Actual PE Digest

13:e5:ea:00:a1:27:13:cd:cf:64:a0:07:86:4b:0a:ef:19:0a:07:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

B:\source\source.PAD\103857\Release_wdobj_73\WX\Desktop_x86_32\Release\wd230obj.pdb

Imports

mpr

WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW

kernel32

SetErrorMode
CreateFileW
DeleteFileW
CopyFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GetTempFileNameW
GetFullPathNameW
GetDriveTypeW
CompareStringW
GetTimeZoneInformation
GetUserDefaultLangID
CreateSemaphoreW
ReleaseSemaphore
VirtualQuery
GetSystemInfo
DecodePointer
WriteConsoleW
ReadConsoleW
SetFileValidData
HeapSize
GetConsoleMode
GetConsoleCP
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
FindNextFileA
FindFirstFileExA
SetStdHandle
LCMapStringW
GetStdHandle
GetStringTypeW
GetACP
GetModuleFileNameA
ExitProcess
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
RtlUnwind
InterlockedFlushSList
RaiseException
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetEndOfFile
FlushFileBuffers
UnlockFileEx
UnlockFile
LockFileEx
LockFile
SetFilePointer
ReadFile
WriteFile
GetVolumeInformationW
GetLogicalDriveStringsW
GetFileInformationByHandle
LocalAlloc
LocalFree
SizeofResource
LockResource
LoadResource
FindResourceW
OutputDebugStringW
GlobalAddAtomW
GetSystemDirectoryW
FindClose
FindNextFileW
FindFirstFileW
WaitNamedPipeW
VirtualProtect
TerminateProcess
MultiByteToWideChar
ReleaseMutex
CreateEventW
CreateMutexW
WaitForSingleObject
WaitForMultipleObjects
SetEvent
ResetEvent
HeapReAlloc
GlobalReAlloc
CloseHandle
OpenThread
FormatMessageW
GetVersionExW
WideCharToMultiByte
GetDateFormatW
GetSystemTime
GetProfileStringW
GetModuleFileNameW
SetCurrentDirectoryW
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
GetStartupInfoW
GetCurrentDirectoryW
GetCurrentProcess
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
IsBadReadPtr
GetWindowsDirectoryW
Beep
GetProfileIntW
GlobalFree
GlobalSize
GlobalAlloc
GlobalUnlock
GlobalLock
GetCurrentProcessId
IsValidCodePage
GetCommandLineW
GetModuleHandleW
GetLastError
SetLastError
FreeLibrary
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
GetLocalTime
GetProcAddress
LoadLibraryW
Sleep
MulDiv
InterlockedIncrement
InterlockedExchangeAdd
GetTickCount
InterlockedDecrement
SetFilePointerEx
LoadLibraryExA

user32

CreateMenu
IsCharAlphaNumericW
IsCharLowerW
IsCharUpperW
keybd_event
CopyImage
SetMenuItemInfoW
IsClipboardFormatAvailable
GetMenuItemCount
GetMenuItemInfoW
GetMenuStringW
SendMessageA
GetDoubleClickTime
DeferWindowPos
GetForegroundWindow
SetScrollRange
CountClipboardFormats
SetCaretPos
GetClassInfoW
ChildWindowFromPointEx
UnionRect
GetScrollInfo
IsChild
CopyRect
CreateWindowExA
RegisterClassW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
DestroyMenu
CheckMenuItem
AppendMenuW
CreatePopupMenu
EnableScrollBar
EnumThreadWindows
GetScrollRange
ScrollWindowEx
GetScrollPos
SetWindowPlacement
SetScrollInfo
CreateIconIndirect
TrackPopupMenu
EnableMenuItem
GetSystemMenu
DefMDIChildProcW
DefFrameProcW
CallWindowProcW
DrawFrameControl
DrawIconEx
InvalidateRgn
GetWindowRgn
LockWindowUpdate
TranslateMDISysAccel
RemoveMenu
ValidateRgn
ScrollDC
GetQueueStatus
GetMessageW
SetForegroundWindow
AllowSetForegroundWindow
SetCursorPos
LoadStringW
FindWindowW
DestroyIcon
MoveWindow
GetClassLongW
GetSubMenu
GetUpdateRgn
SystemParametersInfoW
GetGuiResources
SetClassLongW
MessageBoxW
GetMessagePos
AdjustWindowRectEx
SetRectEmpty
DrawFocusRect
BringWindowToTop
WinHelpW
PostQuitMessage
RegisterWindowMessageW
DrawTextW
GetSysColor
GetClipboardData
RegisterClipboardFormatW
SetFocus
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
GetActiveWindow
SetRect
ReplyMessage
DispatchMessageW
TranslateMessage
UnregisterClassW
GetCursor
ShowScrollBar
SetScrollPos
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
DestroyCursor
SetWindowRgn
EndDeferWindowPos
BeginDeferWindowPos
MessageBeep
SetActiveWindow
EnableWindow
SendMessageTimeoutW
GetUpdateRect
SetCursor
LoadCursorW
PostThreadMessageW
GetWindowThreadProcessId
LoadImageW
LoadIconW
CreateIconFromResourceEx
LoadCursorFromFileW
IsIconic
GetWindowPlacement
InsertMenuItemW
DrawMenuBar
GetMenu
IsCharAlphaW
CharLowerW
CharUpperW
GetKeyboardLayout
SetMenu
InflateRect
ShowCaret
CreateCaret
HideCaret
SubtractRect
EqualRect
GetAsyncKeyState
WindowFromPoint
CreateWindowExW
DestroyWindow
GetCursorPos
IsRectEmpty
DefWindowProcW
IsZoomed
EndPaint
GetClientRect
BeginPaint
GetFocus
GetSystemMetrics
ReleaseCapture
GetCapture
SetCapture
SetWindowTextW
SetParent
InvertRect
OffsetRect
ScreenToClient
SetPropW
RemovePropW
GetPropW
InvalidateRect
PeekMessageW
ShowWindow
SetWindowLongW
GetWindowLongW
GetWindowDC
GetParent
RedrawWindow
ClientToScreen
IntersectRect
GetWindow
SendMessageW
GetWindowRect
IsWindowVisible
ReleaseDC
GetDC
GetDesktopWindow
ValidateRect
SetWindowPos
FillRect
PtInRect
UpdateWindow
IsWindowEnabled
GetKeyState
KillTimer
SetTimer
PostMessageW
IsWindow
InSendMessageEx

gdi32

DeleteObject
BitBlt
CreateCompatibleDC
SelectObject
SaveDC
IntersectClipRect
RestoreDC
GetWindowOrgEx
StretchBlt
GetStockObject
CreateDIBSection
SetLayout
GetLayout
GetCurrentObject
GetObjectW
GetTextExtentPoint32W
GetDeviceCaps
RoundRect
SetBkColor
ExtTextOutW
Rectangle
ExcludeClipRect
MoveToEx
LineTo
SetPixel
GetTextMetricsW
CreateSolidBrush
CreateRectRgnIndirect
CreateCompatibleBitmap
GetSystemPaletteEntries
CreatePalette
CreatePen
GetPixel
SetROP2
SetBkMode
DeleteDC
SetTextColor
CopyMetaFileW
SelectClipRgn
SetStretchBltMode
RectVisible
CreateRectRgn
CombineRgn
OffsetRgn
ExtSelectClipRgn
EqualRgn
GetDIBits
SetDIBits
GetClipBox
GetClipRgn
RectInRegion
GetRgnBox
SelectPalette
RealizePalette
CreateEllipticRgn
GetViewportOrgEx
SetGraphicsMode
GetPaletteEntries
GetBrushOrgEx
SetBrushOrgEx
CreateDIBitmap
CreateFontIndirectW
GetViewportExtEx
GetWindowExtEx
GetCharacterPlacementW
LPtoDP
CreateRoundRectRgn
StretchDIBits
SetDIBitsToDevice
CreatePatternBrush
ExtCreatePen
CreateEnhMetaFileW
CloseEnhMetaFile
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
PlayEnhMetaFile
DeleteEnhMetaFile
CreatePolygonRgn
SetPixelV
CreateBitmap
UnrealizeObject
GetROP2
Polygon
Ellipse
OffsetClipRgn
SetWindowOrgEx

shell32

DragAcceptFiles
ShellExecuteW
DragQueryFileW
SHAppBarMessage
DragQueryPoint

Exports

Exports

?pclCreateFactory@@YGPAUIClassFactory@@XZ
CheckVersion
CommandeComposante
DeclareProxy
Execution
ExternalTermLibrary
InfoComposante
WDTrackPopupMenuLookXP
WLE_DoModal
WLE_bOuvre
WLE_bOuvre2
WLE_hHandle
bExternalInitLibrary
bInitWLCalcFromVM
bInitWLConvFromVM
onXAMLEvent
pQueryProxy

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 629KB - Virtual size: 629KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f7ae4c55299a3ee68f3d80411434d8c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

7f:b2:86:d4:53:b5:c5:7e:8e:09:c9:c9:94:06:8b:9bCertificate

Extended Key Usages

Key Usages

13:e5:ea:00:a1:27:13:cd:cf:64:a0:07:86:4b:0a:ef:19:0a:07:95Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mpr

kernel32

user32

gdi32

shell32

Exports

Exports

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 52KB - Virtual size: 93KB

.gfids Size: 512B - Virtual size: 224B

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 3.4MB - Virtual size: 3.4MB

.reloc Size: 629KB - Virtual size: 629KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

7f:b2:86:d4:53:b5:c5:7e:8e:09:c9:c9:94:06:8b:9b
Certificate

13:e5:ea:00:a1:27:13:cd:cf:64:a0:07:86:4b:0a:ef:19:0a:07:95
Signer

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 52KB - Virtual size: 93KB

.gfids
Size: 512B - Virtual size: 224B

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

.reloc
Size: 629KB - Virtual size: 629KB