pbrtc80[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

pbrtc80.dll
Size

881KB
MD5

59793f82e9e5f2d2412fd38da81cb5da
SHA1

7af820c4eb3c2880e836fe4e11a08bb35ace8cf4
SHA256

438ed742599217238a025a65fb3a85b8935f828f0f5a18a66921c55814722cca
SHA512

73caa8714f136adce4d0d5ccc028d80bc1ad296e90c01b555b3739bf0020e320283c9cb624ea585db764d52f854dcb8aa17322d57fc12acf80ed1877dd3fe6ba
SSDEEP

24576:QtQh43otnrhCTDTG/Cjoh5NG6uur9D5yy/Pt6g9LzELMLTit714Q:0IoohYoCjohGaIyBFQ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pbrtc80.dll

Files

pbrtc80.dll
.dll windows:4 windows x86 arch:x86

8ab7ace96c3b8545f421d23a639a381a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pbdwe80

ord256
ord231
ord236
ord117
ord223
ord238
ord233
ord225
ord222
ord262
ord245
ord261
ord5
ord230
ord243
ord244
ord232
ord241
ord237
ord252
ord214
ord219
ord228
ord229
ord215
ord216
ord226
ord235
ord246
ord224
ord133
ord66
ord65

pbvm80

ord5188
ord5186
ord5335
ord5791
ord5721
ord5792
ord5770
ord5181
ord5182
ord5184
ord2117
ord2164
ord2320
ord5143
ord419
ord2140
ord2143
ord5151
ord2159
ord2407
ord2341
ord2046
ord2136
ord2049
ord2251
ord2011
ord2009
ord5162
ord5150
ord5152
ord5158
ord5144
ord5753
ord5336
ord5159
ord5627
ord5716
ord5124
ord5665
ord5277
ord5289
ord5668
ord5285
ord5667
ord5284
ord5283
ord5195
ord5279
ord5288
ord5287
ord5286
ord5171
ord5039
ord5040

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
abort
srand
rand
_except_handler3
?_query_new_mode@@YAHXZ
?_query_new_handler@@YAP6AHI@ZXZ
islower
toupper
isupper
tolower
sprintf
_mbsbtype
strncmp
_ismbcdigit
isdigit
_ismbcalnum
_mbsstr
strstr
_ismbcalpha
strtok
_mbstok
_purecall
_ismbcspace
isspace
_mbschr
strchr
memchr
_ismbbtrail
_ltoa
memmove
_mbsicmp
atol
_CIpow
floor
ceil
_ftol
atof
atoi
_itoa
strncpy
_mbscat
_mbscpy
_mbslwr
_mbscmp
_strlwr
_stricmp

kernel32

AddAtomA
GetTempPathA
GetTempFileNameA
GetProfileStringA
GetCurrentThreadId
Sleep
CreateEventA
DeleteCriticalSection
InitializeCriticalSection
GetLastError
CreateMutexA
GetCurrentProcessId
WaitForSingleObject
VirtualQueryEx
GetCurrentProcess
OpenProcess
CreateFileMappingA
ReleaseMutex
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
MapViewOfFileEx
OpenMutexA
IsBadCodePtr
GetSystemInfo
VirtualFree
VirtualAlloc
VirtualLock
VirtualQuery
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetTimeFormatA
GetDateFormatA
GetAtomNameA
GetVersion
GlobalMemoryStatus
GetModuleHandleA
FindAtomA
DeleteAtom
GlobalCompact
InterlockedExchange
SetEvent
SetErrorMode
_hread
_lwrite
IsDBCSLeadByte
GlobalReAlloc
LocalReAlloc
GlobalSize
GlobalFree
GlobalUnlock
GlobalLock
FreeLibrary
GetProfileIntA
GetProcAddress
LoadLibraryA
GlobalAlloc
lstrcmpA
lstrlenA
LocalUnlock
lstrcpyA
lstrcatA
LocalAlloc
LocalFree
LocalLock
_llseek
_lclose
_lread
lstrcmpiA

user32

DrawTextA
IsRectEmpty
PtInRect
GetNextDlgTabItem
EndPaint
BeginPaint
DrawFocusRect
SetCapture
ScrollDC
ScrollWindow
IntersectRect
SetRectEmpty
PostMessageA
UnionRect
GetClassLongA
MessageBeep
GetCursorPos
FindWindowA
CharUpperBuffA
CharLowerBuffA
ValidateRect
HideCaret
InflateRect
SetRect
IsCharAlphaNumericA
SetScrollPos
OffsetRect
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsCharAlphaA
SetScrollRange
SetClipboardData
RegisterClipboardFormatA
EmptyClipboard
GetAsyncKeyState
DestroyCaret
GetFocus
InvertRect
IsClipboardFormatAvailable
GetMessagePos
RemovePropA
SetCaretPos
CreateCaret
GetCaretPos
GetDC
ReleaseDC
SetActiveWindow
CopyRect
AdjustWindowRect
ScreenToClient
GetDialogBaseUnits
LoadBitmapA
DlgDirListA
DlgDirSelectExA
SetCursor
GetWindowTextLengthA
GetWindowTextA
IsWindowEnabled
FillRect
GetWindowRect
DialogBoxParamA
EndDialog
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
SetWindowTextA
GetSystemMenu
CreateDialogParamA
GetDlgItemInt
SetDlgItemInt
CheckDlgButton
CheckRadioButton
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
GetDlgItem
wsprintfA
SendDlgItemMessageA
EnableWindow
IsWindowVisible
GetClientRect
MoveWindow
ShowWindow
SetClassLongA
ShowCaret
GrayStringA
SetPropA
SetWindowPos
GetScrollPos
CharUpperA
OpenClipboard
GetClipboardData
CloseClipboard
MessageBoxA
CreateWindowExA
LoadMenuA
GetSubMenu
GetWindowLongA
SetFocus
InvalidateRect
UpdateWindow
DestroyWindow
DestroyMenu
CheckMenuItem
ReleaseCapture
IsWindow
CharLowerA
GetPropA
LoadStringA
GetParent
GetKeyState
GetActiveWindow
ClientToScreen
EnableMenuItem
TrackPopupMenu
CallWindowProcA
GetWindow
GetClassNameA
DefWindowProcA
SendMessageA
RegisterClassA
UnregisterClassA
LoadCursorA
SetWindowLongA
GetSysColor
GetSystemMetrics
DestroyCursor

gdi32

CreatePen
SetRectRgn
GetNearestColor
StretchDIBits
SetDIBitsToDevice
CreateDIBitmap
GetDIBits
GetTextFaceA
CreateCompatibleBitmap
DPtoLP
GetMapMode
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
CreateRectRgnIndirect
GetTextAlign
GetClipBox
Escape
GetTextExtentPoint32A
GetViewportOrgEx
SetViewportExtEx
PlayMetaFile
CreatePalette
DeleteMetaFile
CopyMetaFileA
GetMetaFileBitsEx
CreateMetaFileA
SetWindowExtEx
CloseMetaFile
CreateBitmapIndirect
SetBitmapBits
EnumFontFamiliesExA
CreateBitmap
SetTextAlign
SetBkMode
CreateFontA
GetTextExtentPointA
GetStockObject
MoveToEx
LineTo
LPtoDP
CreateDCA
CreateCompatibleDC
BitBlt
GetDeviceCaps
EnumFontsA
IntersectClipRect
PatBlt
SetMetaFileBitsEx
SelectPalette
RealizePalette
SetStretchBltMode
Rectangle
GetBkColor
GetObjectA
SetTextColor
ExtTextOutA
CreateICA
CreateFontIndirectA
SelectObject
GetTextMetricsA
SetBkColor
SetAbortProc
StartDocA
StartPage
EndPage
AbortDoc
EndDoc
RestoreDC
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetMapMode
CreateSolidBrush
DeleteObject
DeleteDC

winspool.drv

DeviceCapabilitiesA

imm32

ImmGetCompositionFontA
ImmGetContext
ImmReleaseContext
ImmSetCompositionFontA
ImmSetCompositionWindow

Exports

Exports

Button3WndFn
ColorDialogBox
ColorDlgProc
EnumFuncFonts
EnumFuncFontsX
EnumFuncSizes
FontDialogBox
FontDlgProc
GrayOutputFunc
HEIconBarWndFn
HEIconNameComboWndFn
HEIconNameListWndFn
HEIconSizeComboWndFn
HEPreviewEditWndFn
HEPreviewMonitorWndFn
HEPreviewPanelWndFn
HEPreviewWndFn
HighEditDlgFn
HighEditFlags
HighEditInfo
HighEditStyle
HighEditVersion
HighEditWndFn
PaginateFunc
PaneWndFn
ParagraphDialogBox
ParagraphDlgProc
PrinterAbortProc
PrinterDlgProc
ProtectEditProc
RTC_BitmapUpdate
RTC_ComputeUpdate
RTC_DlgBitmapProc
RTC_DlgComputeProc
RTC_DlgGeneralProc
RTC_DlgIFProc
RTC_DlgPrintSpecProc
RTC_DlgSelectedTextProc
RTC_Find_Proc
RTC_GeneralUpdate
RTC_IFUpdate
RTC_PrintSpecUpdate
RTC_PropPtrUpdate
RTC_PrtAbortDlg
RTC_PrtAbortProc
RTC_Replace_Proc
RTC_SelectedTextUpdate
RTC_UtilPropFontUpdate
RTC_WndProc
RTFWndFn
RulerWndFn
StatusWndFn
TabWndFn
WEP
rtcCanUndo
rtcClear
rtcCopy
rtcCopyRTF
rtcCut
rtcFind
rtcFindNext
rtcGetAlignment
rtcGetParagraphSetting
rtcGetSpacing
rtcGetText
rtcGetTextColor
rtcInputFieldChangeData
rtcInputFieldCurrentName
rtcInputFieldDeleteCurrent
rtcInputFieldGetData
rtcInputFieldInsert
rtcInputFieldLocate
rtcInsertDocument
rtcInsertPicture
rtcIsPreview
rtcLineCount
rtcLineLength
rtcPageCount
rtcPaste
rtcPasteRTF
rtcPosition
rtcPreview
rtcPrint
rtcReplaceText
rtcSaveDocument
rtcScroll
rtcScrollNextPage
rtcScrollNextRow
rtcScrollPriorPage
rtcScrollPriorRow
rtcScrollToRow
rtcSelectText
rtcSelectTextAll
rtcSelectTextLine
rtcSelectTextWord
rtcSelectedColumn
rtcSelectedLength
rtcSelectedLine
rtcSelectedPage
rtcSelectedStart
rtcSelectedText
rtcSetAlignment
rtcSetParagraphSetting
rtcSetSpacing
rtcSetTextColor
rtcSetTextStyle
rtcShowHeadFoot
rtcTextLine
rtcUndo
rtc_attrBackColorGet
rtc_attrBackColorSet
rtc_attrDisplayOnlyGet
rtc_attrDisplayOnlySet
rtc_attrDocumentNameGet
rtc_attrDocumentNameSet
rtc_attrHScrollBarGet
rtc_attrHScrollBarSet
rtc_attrHeaderFooterGet
rtc_attrHeaderFooterSet
rtc_attrInputFieldBackColorGet
rtc_attrInputFieldBackColorSet
rtc_attrInputFieldNamesVisibleGet
rtc_attrInputFieldNamesVisibleSet
rtc_attrInputFieldsVisibleGet
rtc_attrInputFieldsVisibleSet
rtc_attrMarginBottomGet
rtc_attrMarginBottomSet
rtc_attrMarginLeftGet
rtc_attrMarginLeftSet
rtc_attrMarginRightGet
rtc_attrMarginRightSet
rtc_attrMarginTopGet
rtc_attrMarginTopSet
rtc_attrModifiedGet
rtc_attrModifiedSet
rtc_attrPictureFrameGet
rtc_attrPictureFrameSet
rtc_attrPointerGet
rtc_attrPointerSet
rtc_attrPopMenuGet
rtc_attrPopMenuSet
rtc_attrReturnsVisibleGet
rtc_attrReturnsVisibleSet
rtc_attrRulerBarGet
rtc_attrRulerBarSet
rtc_attrSpacesVisibleGet
rtc_attrSpacesVisibleSet
rtc_attrTabBarGet
rtc_attrTabBarSet
rtc_attrTabsVisibleGet
rtc_attrTabsVisibleSet
rtc_attrToolBarGet
rtc_attrToolBarSet
rtc_attrUndoDepthGet
rtc_attrUndoDepthSet
rtc_attrUnitGet
rtc_attrUnitSet
rtc_attrVScrollBarGet
rtc_attrVScrollBarSet
rtc_attrWordWrapGet
rtc_attrWordWrapSet
rtcdwShareData

Sections

.text
Size: 764KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ab7ace96c3b8545f421d23a639a381a

Headers

File Characteristics

Imports

pbdwe80

pbvm80

msvcrt

kernel32

user32

gdi32

winspool.drv

imm32

Exports

Exports

Sections

.text Size: 764KB - Virtual size: 764KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 9KB - Virtual size: 28KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 764KB - Virtual size: 764KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 9KB - Virtual size: 28KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 28KB - Virtual size: 27KB