NaturalLanguage6[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

NaturalLanguage6.dll
Size

833KB
MD5

469b9954c5d450ea815520edaa7646ec
SHA1

4b5d1b0248f685aa245163d627c43d56f4876649
SHA256

0ed83472b1ae10838cc26c8a51a6aa885ed90ecaaa399a270ef4a8bd3f710e6b
SHA512

acfb8cb7d4d9c1aaf155316cb672e855cc62318f27f7df1259710eac725b11976748596541a2769fa5381f10d00486a675cec01c84e86e9cbfdc57558ae968f1
SSDEEP

12288:WcIN/HktnlYTQfAjGiQkTRDGkBm2/mH5p62jlW6FQASXkBmb:lIN/kDYhjGlkTlGkBOH5p62jlW6SkIb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NaturalLanguage6.dll

Files

NaturalLanguage6.dll
.dll regsvr32 windows:6 windows x86 arch:x86

ca69c1b52f59b9f203ce34e261e2a391

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

NaturalLanguage6.pdb

Imports

msvcrt

_lock
??1type_info@@UAE@XZ
_initterm
_vsnwprintf
_unlock
__dllonexit
_onexit
?terminate@@YAXXZ
memcpy
memset
isdigit
ungetc
_amsg_exit
__pioinfo
__badioinfo
_read
wcstombs
iswctype
wctomb
__mb_cur_max
mbtowc
localeconv
calloc
_fileno
isleadbyte
_XcptFilter
_CxxThrowException
__CxxFrameHandler
wcsstr
realloc
wcsncmp
malloc
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_resetstkoflw
qsort
free
wcschr
memmove
_purecall
??0exception@@QAE@XZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABV0@@Z
_errno
fclose
fgetws
_wfopen
_wgetcwd
_waccess
_wgetenv
wcsrchr
fread
ftell
fseek
atoi
?name@type_info@@QBEPBDXZ
??8type_info@@QBEHABV0@@Z
tolower
toupper
iswspace
_isctype
isxdigit
_CIsqrt
memcmp

oleaut32

CreateErrorInfo
SetErrorInfo
GetErrorInfo
SysStringLen
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
VariantCopy
VariantClear
VariantInit

api-ms-win-core-synch-l1-2-0

EnterCriticalSection
LeaveCriticalSection
Sleep
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegQueryInfoKeyW

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA
FreeLibrary
GetModuleFileNameW
GetProcAddress

api-ms-win-core-file-l1-2-1

GetFileInformationByHandle
ReadFile
SetFilePointerEx
CreateFileW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-1

StringFromGUID2
CoTaskMemAlloc
IIDFromString

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetLastError

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-debug-l1-1-1

OutputDebugStringA

api-ms-win-core-rtlsupport-l1-2-0

RtlUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetVersion
GetTickCount
GetSystemTimeAsFileTime

shell32

SHGetFolderPathW

kernel32

FlushFileBuffers
WriteFile
SetFilePointer
CreateFileMappingW
SleepEx
UnmapViewOfFile
MapViewOfFile
DelayLoadFailureHook
GetFileSize
GetLocaleInfoA
SetEndOfFile
GetSystemDefaultLCID
CompareStringW
CreateMutexW
CreateEventW
GetLocalTime
FormatMessageW
lstrlenA
lstrlenW
LoadLibraryW
LocalFree

crypt32

CertFindCertificateInStore
CryptAcquireCertificatePrivateKey
CertGetCertificateContextProperty
CertCloseStore
CertOpenSystemStoreW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 724KB - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca69c1b52f59b9f203ce34e261e2a391

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

oleaut32

api-ms-win-core-synch-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-file-l1-2-1

api-ms-win-core-handle-l1-1-0

api-ms-win-core-com-l1-1-1

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-string-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-debug-l1-1-1

api-ms-win-core-rtlsupport-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

shell32

kernel32

crypt32

Exports

Exports

Sections

.text Size: 724KB - Virtual size: 723KB

.data Size: 16KB - Virtual size: 16KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 52KB - Virtual size: 51KB

.reloc Size: 35KB - Virtual size: 34KB

.text
Size: 724KB - Virtual size: 723KB

.data
Size: 16KB - Virtual size: 16KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 52KB - Virtual size: 51KB

.reloc
Size: 35KB - Virtual size: 34KB