oeorowoe[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

oeorowoe.dll
Size

61KB
MD5

6dd9ca5c7bb0ca54e4afd6c627970e26
SHA1

86187fd87068f06b321c62b63532cebe108dfef5
SHA256

538f229ca2b1a840bcabe4b07dfe57fa3000135330dc7f624fecf044716eccd8
SHA512

6988357c9b2dd225c4e9aa13920dc28d29dcbf18dfb31f3f970c88cb7965a2289c91e1e06307b38578680944f9401bfb341051ff50b34aea7c26a39caae4ab84
SSDEEP

768:Pbaz+5QUZ8OuP37G6QvvaLRL9Lg2Hn7XSZC32bzOFcJwJ6RYGchYrtZxBgDxvF9N:WzII7G6QnoZOO66Bhu/gDZuxFM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
oeorowoe.dll

Files

oeorowoe.dll
.dll windows:6 windows x86 arch:x86

3e22f6cc09141e786643c1dafb6f38a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Daddy\Desktop\Engine Menu\Release\Entity.pdb

Imports

kernel32

GetModuleHandleA
VirtualProtect
Sleep
CreateThread
GetCurrentProcess
K32GetModuleInformation
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetTickCount64

msvcp110

?_Winerror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z

msvcr110

strcpy_s
strrchr
malloc
sprintf_s
vsprintf_s
free
strstr
_vsnprintf_s
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_vsnprintf
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_lock
memmove
_libm_sse2_sqrt_precise
memcpy
_CIatan2
_CxxThrowException
__CxxFrameHandler3
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_sin_precise
memset

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e22f6cc09141e786643c1dafb6f38a1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp110

msvcr110

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 9KB - Virtual size: 20KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 9KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB