cli_cppuhelper[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

cli_cppuhelper.dll
Size

61KB
MD5

07b09dc362e4ca76e593597d5351895a
SHA1

29624600fd99375ae8ecb5be97a6cd54673589d3
SHA256

15a90db04874bd20fd68148bc682ee2a90e4b975747053d0f1b41a1fb02af344
SHA512

5d6df25fb411ae02ceca4eb1f322c430289d2080f7bded027de22190681f05db5bffaaa6a60d20fa4927d7e66a8997cab6bc4ff5c4537d473390961c08fad548
SSDEEP

1536:09qo8PyJfX0xHD4S/IQynuRjSKmOten5:09f8PyJfXyMS/IhgSdOten5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cli_cppuhelper.dll

Files

cli_cppuhelper.dll
.dll windows:5 windows x86 arch:x86

613227db272d8d7274a6881079a184e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\AOO\sources\aoo410\main\cli_ure\wntmsci12.pro\bin\cli_cppuhelper.pdb

Imports

msvcr90

_except_handler4_common
?what@exception@std@@UBEPBDXZ
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBDH@Z
_CxxThrowException
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_cexit
__FrameUnwindFilter
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
_crt_debugger_hook

kernel32

LoadLibraryExW
GetLastError
lstrlenW
lstrcatW
SetEnvironmentVariableW
GetEnvironmentVariableW
MultiByteToWideChar
LocalAlloc
LocalFree
GetProcAddress
FreeLibrary
LoadLibraryA
RaiseException
SetLastError
CloseHandle
CreateFileW
IsDebuggerPresent
SetUnhandledExceptionFilter
InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
ReadFile

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

msvcm90

?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z

mscoree

_CorDllMain

Exports

Exports

GetVersionInfo

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

613227db272d8d7274a6881079a184e1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr90

kernel32

advapi32

msvcm90

mscoree

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 42KB - Virtual size: 42KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 42KB - Virtual size: 42KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 1KB - Virtual size: 1KB