SystemTransform[.]dll

General

Target

SystemTransform.dll
Size

204KB
MD5

aa99f5a945c2e8f54c72523882ed8c67
SHA1

bd985847e362ec1dadadbd7da1f4d55acdb3466a
SHA256

26fd5b5e89765a8fa12267cbd102669584db0bf4e58c97e738ed28e0432519eb
SHA512

39554aaf36988a14738e88ba88d533a10d8e446ff12dea8eb8adef267a2222067bc972d410e048546a0030ad9a66357bcead17294d1d1b04c0a913d64af11663
SSDEEP

3072:6mhedc5OQ+revqFCDjbCGZ7/6VZuiictmGCIGyxhu3aTuPCzbif+8rR:hhedc5OQ+reWCuGZDMutGCIG8U7G8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SystemTransform.dll

Files

SystemTransform.dll
.dll windows:4 windows x86 arch:x86

d3a562e62bf587b836ed6e8fcf71d6a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
OutputDebugStringA
IsBadReadPtr
IsBadWritePtr
CreateFileA
ReadFile
WriteFile
GetLastError
SetFilePointer
GetFileSize
CloseHandle
DeleteFileA
SetThreadPriority
WaitForSingleObject
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateThread
SleepEx
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerA
DisableThreadLibraryCalls

msvcrt

_purecall
__CxxFrameHandler
??3@YAXPAX@Z
_CxxThrowException
_ftol
sprintf
malloc
free
memmove
localtime
time
vsprintf
_beginthreadex
_endthreadex
??1type_info@@UAE@XZ
_except_handler3
__dllonexit
_onexit
?terminate@@YAXXZ
_initterm
_adjust_fdiv
??2@YAPAXI@Z

winmm

timeGetDevCaps
timeEndPeriod
timeKillEvent
timeBeginPeriod
timeSetEvent

Exports

Exports

?SYSTRANS_GetTransPercent@@YGJPAXPAK@Z
SYSTRANS_AutoSwitch
SYSTRANS_Create
SYSTRANS_GetOututData
SYSTRANS_GetTransPercent
SYSTRANS_GetVersion
SYSTRANS_InputData
SYSTRANS_ManualSwitch
SYSTRANS_RegisterOutputDataCallBack
SYSTRANS_RegisterOutputDataCallBackEx
SYSTRANS_Release
SYSTRANS_Start
SYSTRANS_Stop

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3a562e62bf587b836ed6e8fcf71d6a3

Headers

File Characteristics

Imports

kernel32

msvcrt

winmm

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 44KB - Virtual size: 59KB

.rsrc Size: 4KB - Virtual size: 960B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 44KB - Virtual size: 59KB

.rsrc
Size: 4KB - Virtual size: 960B

.reloc
Size: 4KB - Virtual size: 3KB