hisinfopost[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

hisinfopost.dll
Size

1.6MB
MD5

61a9ae6c1971ceb3b532b723dd6a0252
SHA1

b757b77991c4370a399cd6dde224d8c83285f3ab
SHA256

e5f4882cecb79fb807daab395f5853f8b619d085c58e66c4d8f5b382cb00c8e7
SHA512

65c3725106599eb7153536a44b4228d25693633dfb90d7ca38c292974b796e1994570e458c3ca7a84e6e70ee735f91ddea7b0935216559c14e19eebef56615d0
SSDEEP

24576:VDOeku2Lzrn/+x5/IY0mpyobUgb6eIZOFWX:VieqLzrn/FO85ZCWX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hisinfopost.dll

Files

hisinfopost.dll
.dll windows:6 windows x86 arch:x86

69ebd4645bf8d117fcf17c7aa70a0693

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\code\dll\dll\dist\Debug\hisinfopost.pdb

Imports

kernel32

GetProcAddress
LoadLibraryExA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
FormatMessageA
lstrcmpA
lstrcmpiA
lstrlenA
FindResourceA
FindResourceW
MoveFileExA
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateFileA
GetFileSize
SetFilePointer
WriteFile
GetLocalTime
MoveFileA
RtlUnwind
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
HeapValidate
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
GetModuleFileNameW
GetModuleHandleExW
ReadFile
GetStdHandle
GetFileType
WriteConsoleW
GetCommandLineA
LoadLibraryExW
LoadLibraryW
GetCurrentThread
FatalAppExitA
ExitProcess
AreFileApisANSI
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
GetModuleHandleA
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
HeapAlloc
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetConsoleCtrlHandler
OutputDebugStringW
WaitForSingleObjectEx
ReadConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
InterlockedExchange
GetStringTypeW
SetStdHandle
CreateFileW
SetEndOfFile
SetEvent
OpenEventW
InterlockedCompareExchange
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
VirtualFree
HeapDestroy
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetEnvironmentVariableA
GetTimeZoneInformation
lstrlenW
GetModuleFileNameA
FreeLibrary
FindResourceExW
GetTickCount
FlushInstructionCache
GetCurrentThreadId
CreateThread
GetCurrentProcess
InterlockedDecrement
Sleep
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
RaiseException
CloseHandle
OutputDebugStringA
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
InitializeCriticalSection

user32

GetWindow
LoadCursorA
LoadIconA
UnregisterClassA
ReleaseDC
GetDC
GetForegroundWindow
DestroyAcceleratorTable
CreateAcceleratorTableA
EnableWindow
ReleaseCapture
SetCapture
GetDesktopWindow
GetClassNameA
CharNextA
GetDlgItem
SetWindowLongA
GetWindowLongA
FillRect
RegisterWindowMessageA
SendMessageA
DefWindowProcA
CallWindowProcA
RegisterClassExA
GetClassInfoExA
BeginPaint
CreateWindowExA
IsWindow
IsChild
SetFocus
GetParent
GetSysColor
ScreenToClient
ClientToScreen
MessageBoxA
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
GetFocus
EndDialog
DialogBoxParamA
SetWindowPos
MoveWindow
DestroyWindow

advapi32

RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyW
RegSetValueExA
SetThreadToken
OpenThreadToken
RevertToSelf
RegCreateKeyExA

ole32

CoTaskMemFree
OleUninitialize
OleLockRunning
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CreateStreamOnHGlobal
OleInitialize

shell32

ShellExecuteA

oleaut32

CreateErrorInfo
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
GetErrorInfo
VariantChangeType
SetErrorInfo

gdi32

BitBlt
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
GetObjectA
CreateCompatibleBitmap

wininet

InternetSetOptionA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA

Exports

Exports

?postPresNoWindow_v1@@YGHPBD0H0@Z
confirmPres
getLastXmlResult
getLastXmlResultTrans
postPres
postPresNoWindow
postPresNoWindowTrans
postPresTrans
postPresWithXY
runGetPrescription
runGetPrescriptionWithZoneId
runxxxxx
setDefaultTimeOut

Sections

.textbss
Size: - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69ebd4645bf8d117fcf17c7aa70a0693

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

gdi32

wininet

Exports

Exports

Sections

.textbss Size: - Virtual size: 619KB

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 215KB - Virtual size: 214KB

.data Size: 17KB - Virtual size: 28KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 52KB - Virtual size: 52KB

.textbss
Size: - Virtual size: 619KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 215KB - Virtual size: 214KB

.data
Size: 17KB - Virtual size: 28KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 52KB - Virtual size: 52KB