tateware[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

tateware.dll
Size

2.9MB
MD5

fb75fdaffa11bd26af5919bbc873290e
SHA1

0a5347f88a5fbbd0266792f308d3a559c0052008
SHA256

33111170d958d13585ae0623b3c744153eb49ce93f020fbfa62b2ce3e3fa921a
SHA512

6f805bf82d18c7bb27022b1aa6587b0e2fbf2c5c614c871c07ef56d66386487c3bf07256122894993fa5956609feb9c2c48ed39e2c8204e490861c30dd106510
SSDEEP

49152:f0tUejuN/5w1m2y0sWfroN6nR6Sz9P71Vx4Zp7YB3QmcuGsCdmUpq6LWb:MObN6sWFR6Sz9P7Tcu3vJCZFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tateware.dll

Files

tateware.dll
.dll windows:6 windows x64 arch:x64

f67b410763b28eadc35126ef4c5e48d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeviceIoControl
GetModuleHandleA

user32

GetClipboardData
CreateCursor

advapi32

CryptDestroyKey
RegCloseKey

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

msvcp140

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ

dwmapi

DwmExtendFrameIntoClientArea

d3d11

D3D11CreateDeviceAndSwapChain

ntdll

RtlLookupFunctionEntry

imm32

ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

normaliz

IdnToAscii

wldap32

ord32

crypt32

CertGetCertificateChain

ws2_32

htonl

psapi

GetModuleInformation

userenv

UnloadUserProfile

vcruntime140

__std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

pow

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-stdio-l1-1-0

ftell

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-string-l1-1-0

_strdup

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-multibyte-l1-1-0

_mbsicmp

shell32

ShellExecuteA
PathMakeUniqueName

Exports

Exports

main

Sections

.rsrc
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pexe
Size: - Virtual size: 802KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f67b410763b28eadc35126ef4c5e48d6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

d3dx11_43

msvcp140

dwmapi

d3d11

ntdll

imm32

d3dcompiler_47

normaliz

wldap32

crypt32

ws2_32

psapi

userenv

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

shell32

Exports

Exports

Sections

.rsrc Size: - Virtual size: 1.1MB

.pexe Size: - Virtual size: 802KB

.rdata Size: - Virtual size: 1.8MB

.rsrc Size: 1024B - Virtual size: 824B

.text Size: 2.9MB - Virtual size: 2.9MB

.rsrc
Size: - Virtual size: 1.1MB

.pexe
Size: - Virtual size: 802KB

.rdata
Size: - Virtual size: 1.8MB

.rsrc
Size: 1024B - Virtual size: 824B

.text
Size: 2.9MB - Virtual size: 2.9MB