UIRibbon[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

UIRibbon.dll
Size

3.4MB
MD5

f026ca9044fa1dc2f6e78b981bdfdf0d
SHA1

daf09559873ce64a24561a7904fc914260ead89d
SHA256

72c91be7361d2e8a3e6e82209bb2cbed721fa00fa74223d5a318445664036906
SHA512

6b692e22c035979623cb55e967bb650e6580fe3ef7ea9aa65ac225ea25c7b1b5a1a03772e6a97e41bae8c9a23c95fcb9e6015befa3bbbe960debb61cf6bdc8ac
SSDEEP

49152:AbKSJFvXeF2RwbQfqyq8u9z6m1J9lKW7Qw/uUJeMwYCqvYFq:Uxv1qt8u9z6O9lKWk0uUJeMwqwFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UIRibbon.dll

Files

UIRibbon.dll
.dll windows:6 windows x86 arch:x86

730ae30dc780edf54950c402f33520d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

UIRibbon.pdb

Imports

msvcrt

memcpy_s
memmove
memset
realloc
_purecall
_callnewh
malloc
free
iswascii
iswprint
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UAE@XZ
_except_handler4_common
_initterm
_amsg_exit
_XcptFilter
__RTDynamicCast
wcsrchr
wcsncmp
floor
qsort
_CIlog
_CIexp
ceil
_ftol2
_CIsqrt
_CIpow
swprintf_s
_isnan
_finite
_ftol2_sse
memcpy
_vsnwprintf
_wtoi
_CIcos
_CIsin
memcmp
fwprintf
fclose
fopen
wcstoul
_CIlog10
_resetstkoflw
strstr
_wcsupr
_CIfmod
fgets
wcstok

advapi32

RegQueryValueExW
RegOpenKeyExW
RegGetValueW
RegSetKeyValueW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
UnregisterTraceGuids
RegisterTraceGuidsA
TraceEvent
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
IsTextUnicode

gdi32

CreateDIBPatternBrushPt
GetTextMetricsW
SetMapMode
SetBitmapBits
SelectPalette
RealizePalette
SetRectRgn
OffsetRgn
PatBlt
MoveToEx
LineTo
CreatePen
DeleteEnhMetaFile
SetBrushOrgEx
PlayEnhMetaFile
GetEnhMetaFileHeader
SetDCBrushColor
SaveDC
RestoreDC
LPtoDP
Ellipse
CreatePolygonRgn
GetBkColor
GetTextColor
SetViewportOrgEx
CreateDCW
RectVisible
ScriptItemize
GetDCOrgEx
GetPaletteEntries
GetSystemPaletteEntries
ScriptBreak
EqualRgn
SetLayout
DeleteObject
GetObjectType
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateFontIndirectW
CreateSolidBrush
DeleteDC
SelectObject
SetBkColor
SetTextColor
CreateDIBSection
CreateRectRgn
CombineRgn
FillRgn
CreateBitmap
BitBlt
CreatePatternBrush
GetStockObject
CreateCompatibleBitmap
CreateDCA
GetClipBox
GetCurrentObject
GetDIBits
GetPixel
SetDIBitsToDevice
StretchDIBits
GetDIBColorTable
SetDIBColorTable
GetObjectA
ExtTextOutA
SetBkMode
CreateFontIndirectA
CreateDIBitmap
SetDIBits
StretchBlt
SetStretchBltMode
GetViewportOrgEx
GetWindowOrgEx
GetTextCharsetInfo
TranslateCharsetInfo
SetPixel
GetTextMetricsA
GdiAlphaBlend
GdiTransparentBlt
GdiGradientFill
GetClipRgn
SelectClipRgn
ExtSelectClipRgn
GetLayout
CreateRoundRectRgn
SetWindowOrgEx
ExcludeClipRect
GetTextAlign
IntersectClipRect
SetTextAlign
ExtTextOutW
GetBrushOrgEx
GetTextExtentPoint32W

kernel32

GetFullPathNameW
GetFileAttributesA
DeleteFileA
ExpandEnvironmentStringsW
GetFileAttributesW
QueryDepthSList
InterlockedFlushSList
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
HeapCreate
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReadFile
GetFileSize
InitializeCriticalSectionAndSpinCount
AddAtomW
DeleteAtom
WriteFile
IsProcessorFeaturePresent
GetLocaleInfoA
IsDBCSLeadByte
lstrcmpW
HeapDestroy
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
GetProcAddress
FindAtomW
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ReleaseSRWLockShared
AcquireSRWLockShared
lstrlenW
CompareStringOrdinal
CompareStringW
GetLocaleInfoW
GetNumberFormatW
GetUserDefaultLCID
CloseHandle
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
CreateThread
GetCurrentThread
SetThreadPriority
GetThreadPriority
FreeLibraryAndExitThread
GetModuleHandleExW
CompareStringEx
RaiseException
OutputDebugStringA
GetLastError
SetLastError
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
LoadLibraryW
GetVersionExA
VirtualFree
LoadLibraryA
SetProcessWorkingSetSize
GetUserDefaultLangID
Sleep
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
LockResource
SizeofResource
FindResourceA
CreateFileW
GetFileType
GlobalMemoryStatusEx
LoadLibraryExW
GetCurrentProcessId
WideCharToMultiByte
GetACP
MulDiv
FindResourceW
InitOnceExecuteOnce
InitializeSRWLock
MultiByteToWideChar
GlobalAddAtomW
GetModuleHandleExA
WaitForMultipleObjects
DelayLoadFailureHook
ResolveDelayLoadedAPI
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetAtomNameW
GetStringTypeExW

ole32

PropVariantClear
PropVariantCopy
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
RevokeDragDrop
CoUninitialize
CoInitializeEx
OleUninitialize
CoLockObjectExternal
CLSIDFromString
OleDraw
CoInitialize
CoDisconnectObject

user32

RegisterSystemThread
IsWindowInDestroy
CallNextHookEx
ord2559
GetKeyboardState
ChildWindowFromPointEx
IsWinEventHookInstalled
IsWindow
SetMenu
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetWindowThreadProcessId
GetAncestor
CopyImage
PostMessageW
ShowWindow
GetDC
ReleaseDC
IsIconic
GetClientRect
TranslateMessage
DispatchMessageW
SendMessageW
GetPropW
SetWindowsHookExW
UnhookWindowsHookEx
LoadBitmapA
SetTimer
KillTimer
MonitorFromRect
GetSystemMetrics
LoadStringW
LoadImageW
GetSysColor
DrawTextW
FillRect
GetAsyncKeyState
CreateWindowExW
DefWindowProcW
LoadIconW
LoadCursorW
RegisterClassW
ClientToScreen
BeginPaint
EndPaint
InvalidateRect
TrackMouseEvent
SetCapture
ReleaseCapture
RegisterWindowMessageA
GetMenuCheckMarkDimensions
GetProcessDefaultLayout
LoadCursorA
SystemParametersInfoA
GetSysColorBrush
IntersectRect
GetMonitorInfoA
EnumDisplayMonitors
SendMessageA
WaitMessage
PostQuitMessage
UnregisterClassA
RegisterClassExW
GetClassInfoExW
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
IsWindowVisible
GetFocus
GetKeyState
EnableWindow
GetSystemMenu
EnableMenuItem
SetWindowTextW
GetWindowRect
AdjustWindowRectEx
SetRect
OffsetRect
IsRectEmpty
GetWindowLongA
GetClassLongA
GetParent
PostMessageA
UnregisterClassW
SetLayeredWindowAttributes
MoveWindow
MessageBeep
MapWindowPoints
InflateRect
EqualRect
PtInRect
GetMessageW
PeekMessageA
PeekMessageW
DefWindowProcA
MsgWaitForMultipleObjects
IsWindowUnicode
SetWindowTextA
GetWindowTextW
SendMessageTimeoutA
SendMessageTimeoutW
CallWindowProcW
GetActiveWindow
AppendMenuW
SetWindowLongA
EnumWindows
EnumThreadWindows
GetClassNameA
GetWindow
MonitorFromWindow
SetFocus
GetCursorPos
ScreenToClient
WindowFromPoint
SetParent
NotifyWinEvent
AnimateWindow
DeferWindowPos
GetClassNameW
SetCursor
MonitorFromPoint
GetMessagePos
GetForegroundWindow
SystemParametersInfoW
GetKeyboardLayout
GetDoubleClickTime
UpdateWindow
LoadImageA
IsWindowEnabled
SetForegroundWindow
GetPropA
UnionRect
BeginDeferWindowPos
EndDeferWindowPos
GetCapture
RedrawWindow
SetWindowsHookExA
GetClassInfoA
IsMenu
UpdateLayeredWindow
TrackPopupMenuEx
GetWindowDC
SetWindowRgn
ValidateRect
LockWindowUpdate
SetPropW
RemovePropW
GetWindowTextLengthA
CopyRect
FrameRect
RegisterWindowMessageW
VkKeyScanExW
DrawEdge
DrawFrameControl
IsZoomed
DrawTextExW
SetRectEmpty
DestroyIcon
DrawIconEx
CreateIconIndirect
GetIconInfo
InternalGetWindowText
IsProcessDPIAware
GetWindowInfo
GetTitleBarInfo
DrawFocusRect
GetMessageTime
LogicalToPhysicalPointForPerMonitorDPI
GetClassLongW
GetMonitorInfoW
GetWindowTextLengthW
CreatePopupMenu
DestroyMenu
InvertRect

gdiplus

GdipSetImageAttributesColorKeys
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImagePointRectI
GdipDrawImageRectRectI
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageRotateFlip
GdipCloneBitmapAreaI
GdipBitmapGetPixel
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSetClipRect
GdipDrawImageRectRect
GdipFillRectangle
GdipDisposeImageAttributes
GdiplusShutdown
GdipCreateRegion
GdipDeleteRegion
GdipSetClipRegion
GdipGetClip
GdipIsClipEmpty
GdipDeletePen
GdipCreateMatrix2
GdipDeleteMatrix
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipSaveGraphics
GdipRestoreGraphics
GdipCreateMatrix
GdipTranslateRegionI
GdipGetDC
GdipReleaseDC
GdipSetCompositingMode
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetSmoothingMode
GdipGetPixelOffsetMode
GdipSetTextRenderingHint
GdipGetTextRenderingHint
GdipSetTextContrast
GdipGetTextContrast
GdipSetInterpolationMode
GdipGetInterpolationMode
GdipGetWorldTransform
GdipCreateImageAttributes

xmllite

CreateXmlReader
CreateXmlWriter

oleaut32

VarBstrFromI4
VarI4FromStr
VarDecRound
VarDecInt
VarDecSu
VarDecMul
VarDecDiv
VarDecAdd
VarCmp
VarDecFromR8
VariantChangeTypeEx
OleCreateFontIndirect
VariantChangeType
VariantCopy
VariantInit
VariantClear
SetErrorInfo
SysStringLen
SysAllocStringLen
SafeArrayCreateVector
SafeArrayGetVartype
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayDestroy
SysAllocString
VarDecCmp
VarDecFromStr
VarDecFromI4
VarUI4FromDec
VarBstrFromDec
SysFreeString
SafeArrayGetUBound

api-ms-win-core-path-l1-1-0

PathCchAppend
PathCchRemoveFileSpec

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bootdat
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

730ae30dc780edf54950c402f33520d9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

gdi32

kernel32

ole32

user32

gdiplus

xmllite

oleaut32

api-ms-win-core-path-l1-1-0

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.data Size: 219KB - Virtual size: 220KB

.idata Size: 14KB - Virtual size: 13KB

.didat Size: 512B - Virtual size: 228B

.bootdat Size: 4KB - Virtual size: 3KB

.rsrc Size: 244KB - Virtual size: 244KB

.reloc Size: 165KB - Virtual size: 164KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.data
Size: 219KB - Virtual size: 220KB

.idata
Size: 14KB - Virtual size: 13KB

.didat
Size: 512B - Virtual size: 228B

.bootdat
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 244KB - Virtual size: 244KB

.reloc
Size: 165KB - Virtual size: 164KB