0f0a7d189ef514f97279ef24194c08ea5c99dd39a9d7af486ea8aedb68e0f18b[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

0f0a7d189ef514f97279ef24194c08ea5c99dd39a9d7af486ea8aedb68e0f18b.dll
Size

186KB
MD5

2769761a23f793d93bbad3ded28e8ebd
SHA1

df83ef58856650a7564b0f5d0914dc8478511ccf
SHA256

0f0a7d189ef514f97279ef24194c08ea5c99dd39a9d7af486ea8aedb68e0f18b
SHA512

9af46e2c44a63dc4a07cc7d75fb24d82174801e87b0cf95f3ca8b86613ba20de93c0cc246d20a7487f05ce5825c1a6824e8ef31dc2a3b196b079527186fde047
SSDEEP

3072:M2U6Z3AUyPihSJjBIYj5MxPYlGUySgWmVNlFJa34kg:M2JVwihSJjOYWPkOXXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f0a7d189ef514f97279ef24194c08ea5c99dd39a9d7af486ea8aedb68e0f18b.dll

Files

0f0a7d189ef514f97279ef24194c08ea5c99dd39a9d7af486ea8aedb68e0f18b.dll
.dll windows:5 windows x86 arch:x86

a87240b873c1a5b2b17c559a4ce533e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumTimeFormatsW
GlobalAddAtomW
TryEnterCriticalSection
HeapAlloc
EnumResourceNamesW
GlobalFix
HeapCompact
TlsSetValue
FindResourceExA
MoveFileA
CompareFileTime
WriteProfileSectionW
InitializeSListHead
UpdateResourceA
ClearCommBreak
GetDevicePowerState
Sleep
EnumResourceTypesW
SetConsoleTitleA
IsSystemResumeAutomatic
GetShortPathNameA
GetPrivateProfileStringW
IsBadStringPtrA
CreateMailslotW
LoadLibraryA
GetProcAddress
PeekConsoleInputA
GetSystemWindowsDirectoryW
OpenWaitableTimerA
CreateFileW
GetLastError
SetFilePointer
WriteFile
CloseHandle
SetConsoleActiveScreenBuffer
SetCurrentDirectoryW
EnumSystemCodePagesA
GetCalendarInfoA
GetTickCount
FindResourceW

user32

DefDlgProcA
DrawAnimatedRects
ArrangeIconicWindows
SetWindowRgn
HideCaret
ScrollWindowEx
ShowWindowAsync
RegisterClipboardFormatA
AnimateWindow
FillRect
GetClassInfoExW
IsDialogMessageW
CharLowerBuffA
LoadStringW
GetKBCodePage
DlgDirSelectComboBoxExA
ClipCursor
IsWindowUnicode
SendMessageTimeoutA
PostMessageA
OemToCharA
GetClipboardFormatNameA
UnregisterDeviceNotification
ExitWindowsEx
SetPropA
SystemParametersInfoA
UnregisterClassA
GetDlgItemInt
IsWindowEnabled
LoadCursorFromFileA

gdi32

CloseFigure
SetBitmapBits
GetPixel
PlayMetaFileRecord
GetMiterLimit
GetEnhMetaFileHeader
SetICMProfileA
SetColorSpace
SetICMMode
SetTextColor
SetDeviceGammaRamp
SelectPalette
GetWindowExtEx
CreateEnhMetaFileA
DeleteDC
LPtoDP
GetBitmapBits

advapi32

IsValidSid
SetSecurityDescriptorSacl
RegDisablePredefinedCache
FileEncryptionStatusW
LookupPrivilegeNameW
OpenBackupEventLogW
LogonUserW
RegEnumKeyW
StartServiceCtrlDispatcherW
InitiateSystemShutdownExW
SetKernelObjectSecurity
AreAllAccessesGranted
QueryServiceConfigA
LookupPrivilegeNameA
RegOpenUserClassesRoot
ImpersonateLoggedOnUser
ReadEventLogW
RegEnumKeyExA

Exports

Exports

GnrkBltvkx
GnrkBmoaar
GnrkCyrpw
GnrkEkp
GnrkEnjzs
GnrkFa
GnrkFsx
GnrkGm
GnrkGt
GnrkHhcpo
GnrkHjtl
GnrkIiip
GnrkJird
GnrkJstv
GnrkKhlhca
GnrkKhqbbu
GnrkLmkamk
GnrkLoc
GnrkNlqh
GnrkNofovl
GnrkNr
GnrkNsdwzc
GnrkOda
GnrkOhqbhe
GnrkOi
GnrkOksgc
GnrkOxft
GnrkPp
GnrkQm
GnrkQr
GnrkQulon
GnrkRrdcfn
GnrkSbq
GnrkSf
GnrkStso
GnrkTcfv
GnrkTch
GnrkTjxdo
GnrkTrg
GnrkUsmc
GnrkVnndq
GnrkWapq
GnrkWsnq
GnrkWtlrh
GnrkWyey
GnrkXalbb
GnrkXzwnp
GnrkZewk
GnrkZtdij

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a87240b873c1a5b2b17c559a4ce533e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 153KB - Virtual size: 152KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 433KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 433KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 10KB - Virtual size: 9KB