CallButtons[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

CallButtons.dll
Size

95KB
MD5

ef26606a4f5d101f08be20c631418135
SHA1

0bc6e4fa7097563bd268152a1fe8b80f17306cf6
SHA256

383d861cb1fcff892ffb3add3e086634abf869de0d67a0a0593ebee77517bfb7
SHA512

eb6f406d7e2a110886ba80fcf6dd0e178161d50266ebfcc93c8102b53d0cf5c3f2a6892b38f493ab4b235259d1e71832ffdf9fa410282c16af89d3a9602b98bc
SSDEEP

1536:kIzzPXfIy96ByU6T1FR7ynQtr18LQosnZ0AiHZ6Vp1HFF9TqdIZYrRX4aJUR:dzzPXfrRyi3osnZ0VkVpfvWdSYrRIaWR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CallButtons.dll

Files

CallButtons.dll
.dll windows:6 windows x64 arch:x64

a85ed15036f5dd6d3b956c00346a7913

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

CallButtons.pdb

Imports

msvcrt

__CxxFrameHandler3
_unlock
_lock
??2@YAPEAX_K@Z
__C_specific_handler
__dllonexit
_initterm
malloc
free
_amsg_exit
??3@YAXPEAX@Z
_XcptFilter
memcmp
_purecall
_onexit
??1type_info@@UEAA@XZ
realloc
_errno
memcpy_s
_vsnwprintf
atol
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
memmove_s
memset

hid

HidP_UnsetUsages
HidP_MaxUsageListLength
HidP_GetUsageValue
HidP_GetValueCaps
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetButtonCaps
HidP_SetUsageValue
HidP_SetUsages
HidP_SetUsageValueArray
HidD_FreePreparsedData
HidP_GetCaps
HidD_GetPreparsedData
HidP_GetSpecificValueCaps
HidP_GetLinkCollectionNodes

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-synch-l1-2-0

AcquireSRWLockExclusive
WaitForMultipleObjectsEx
InitializeSRWLock
ResetEvent
SetEvent
WaitForSingleObject
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
Sleep
CreateEventW

api-ms-win-core-winrt-error-l1-1-1

RoOriginateErrorW
RoTransformError
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo
RoOriginateError
IsErrorPropagationEnabled

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsConcatString
WindowsDuplicateString
WindowsCreateString
WindowsCreateStringReference
WindowsIsStringEmpty
WindowsDeleteString

api-ms-win-core-com-l1-1-1

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoGetCallContext
CoCreateInstance
CoTaskMemFree

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
CreateThread

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-rtlsupport-l1-2-0

RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetLastError

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoGetActivationFactory

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar
WideCharToMultiByte

rpcrt4

NdrClientCall3
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
RpcBindingFree

api-ms-win-core-file-l1-2-1

ReadFile
WriteFile

api-ms-win-core-heap-l1-2-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-io-l1-1-1

CancelIo
GetOverlappedResult

ntdll

RtlPublishWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlNtStatusToDosError
RtlSubscribeWnfStateChangeNotification

api-ms-win-core-debug-l1-1-1

OutputDebugStringA

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a85ed15036f5dd6d3b956c00346a7913

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

hid

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-com-l1-1-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-rtlsupport-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-string-l1-1-0

rpcrt4

api-ms-win-core-file-l1-2-1

api-ms-win-core-heap-l1-2-0

api-ms-win-core-io-l1-1-1

ntdll

api-ms-win-core-debug-l1-1-1

Exports

Exports

Sections

.text Size: 82KB - Virtual size: 81KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 3KB - Virtual size: 2KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 82KB - Virtual size: 81KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 3KB - Virtual size: 2KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB