kaIadSB[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

kaIadSB.dll
Size

3.4MB
MD5

98a79941f9d51aab89ef3cd40d1cfd87
SHA1

47b9552f6c5bfa9f362aa5c6d76796b9fe9d6edd
SHA256

48ede7a3aec9faaaa468c26204d271e55ee3581dcc2184934aef64cb6335e706
SHA512

3e176a9044b282bb2a5e4279d7e030e179e8c90776a9109c45c28942abae00d63f6ab8806c9ddd7e0f1cc085f6b5396ad54e231de392912d18aabcd2cb74157e
SSDEEP

49152:+OHFucope9RNelSfVyISVBNA0ikOmRS2+8y+7iBEGOGoiwI6rfFv3Oypp3:P1WW0IAHqQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kaIadSB.dll

Files

kaIadSB.dll
.dll windows:6 windows x64 arch:x64

be3d4fb62db9fbfcc2dd467b4d4b9940

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

api-ms-win-crt-string-l1-1-0

strlen
strncmp

Exports

Exports

Java_abc_def_Core__00024jnicLoader
Java_abc_def_H_A_ConfigCmd__00024jnicLoader
Java_abc_def_H_A_FriendCmd__00024jnicLoader
Java_abc_def_H_A_HClipCmd__00024jnicLoader
Java_abc_def_H_A_VClipCmd__00024jnicLoader
Java_abc_def_H_CmdManager__00024jnicLoader
Java_abc_def_H_Command__00024jnicLoader
Java_abc_def_addon_Addon__00024jnicLoader
Java_abc_def_addon_B_NotificationManager__00024jnicLoader
Java_abc_def_addon_B_NotificationType__00024jnicLoader
Java_abc_def_addon_B_Notification_000241__00024jnicLoader
Java_abc_def_addon_B_Notification__00024jnicLoader
Java_abc_def_addon_Category__00024jnicLoader
Java_abc_def_addon_ModuleManager__00024jnicLoader
Java_abc_def_addon_X_I_N__00024jnicLoader
Java_abc_def_addon_X_I_q__00024jnicLoader
Java_abc_def_addon_X_I_w__00024jnicLoader
Java_abc_def_addon_X_Menu__00024jnicLoader
Java_abc_def_addon_X_UIScreen__00024jnicLoader
Java_abc_def_addon_X_Z_ThemeManager__00024jnicLoader
Java_abc_def_addon_X_Z_Theme_00024ThemeBuilder__00024jnicLoader
Java_abc_def_addon_X_Z_Theme__00024jnicLoader
Java_abc_def_addon_X_z_E_y__00024jnicLoader
Java_abc_def_addon_X_z_I__00024jnicLoader
Java_abc_def_addon_X_z_T_W__00024jnicLoader
Java_abc_def_addon_X_z_T_x_R__00024jnicLoader
Java_abc_def_addon_X_z_T_x_V__00024jnicLoader
Java_abc_def_addon_X_z_T_x_Z__00024jnicLoader
Java_abc_def_addon_X_z_T_x_n__00024jnicLoader
Java_abc_def_addon_X_z_Y_G__00024jnicLoader
Java_abc_def_addon_X_z_d__00024jnicLoader
Java_abc_def_addon_X_z_k_P__00024jnicLoader
Java_abc_def_addon_X_z_k_e_A__00024jnicLoader
Java_abc_def_addon_X_z_k_e_H__00024jnicLoader
Java_abc_def_addon_X_z_k_e_K_B__00024jnicLoader
Java_abc_def_addon_X_z_k_e_K_E__00024jnicLoader
Java_abc_def_addon_X_z_k_e_K_J__00024jnicLoader
Java_abc_def_addon_X_z_k_e_K_j__00024jnicLoader
Java_abc_def_addon_X_z_k_e_K_q__00024jnicLoader
Java_abc_def_addon_X_z_k_e_K_x__00024jnicLoader
Java_abc_def_addon_X_z_k_e_K_y__00024jnicLoader
Java_abc_def_addon_X_z_k_e_T__00024jnicLoader
Java_abc_def_addon_X_z_k_e_W__00024jnicLoader
Java_abc_def_addon_X_z_k_e_Y__00024jnicLoader
Java_abc_def_addon_X_z_k_e_c__00024jnicLoader
Java_abc_def_addon_X_z_k_e_e__00024jnicLoader
Java_abc_def_addon_X_z_k_e_o__00024jnicLoader
Java_abc_def_addon_X_z_k_e_v__00024jnicLoader
Java_abc_def_addon_X_z_k_e_w__00024jnicLoader
Java_abc_def_addon_X_z_k_e_z__00024jnicLoader
Java_abc_def_addon_X_z_s__00024jnicLoader
Java_abc_def_addon_X_z_v_E__00024jnicLoader
Java_abc_def_addon_X_z_v_S__00024jnicLoader
Java_abc_def_addon_X_z_v_d__00024jnicLoader
Java_abc_def_addon_X_z_v_o__00024jnicLoader
Java_abc_def_addon_impl_c_aml__00024jnicLoader
Java_abc_def_addon_impl_c_azl__00024jnicLoader
Java_abc_def_addon_impl_c_bom__00024jnicLoader
Java_abc_def_addon_impl_c_cik__00024jnicLoader
Java_abc_def_addon_impl_c_cnc__00024jnicLoader
Java_abc_def_addon_impl_c_fjs__00024jnicLoader
Java_abc_def_addon_impl_c_jkl__00024jnicLoader
Java_abc_def_addon_impl_c_lda__00024jnicLoader
Java_abc_def_addon_impl_c_olg__00024jnicLoader
Java_abc_def_addon_impl_c_udf__00024jnicLoader
Java_abc_def_addon_impl_c_udp__00024jnicLoader
Java_abc_def_addon_impl_c_vmg__00024jnicLoader
Java_abc_def_addon_impl_c_vmn__00024jnicLoader
Java_abc_def_addon_impl_c_vnf__00024jnicLoader
Java_abc_def_addon_impl_c_vvp__00024jnicLoader
Java_abc_def_addon_impl_c_xvx__00024jnicLoader
Java_abc_def_addon_impl_c_yfc__00024jnicLoader
Java_abc_def_addon_impl_cr_H__00024jnicLoader
Java_abc_def_addon_impl_cr_Q__00024jnicLoader
Java_abc_def_addon_impl_cr_U__00024jnicLoader
Java_abc_def_addon_impl_cr_Y__00024jnicLoader
Java_abc_def_addon_impl_cr_k__00024jnicLoader
Java_abc_def_addon_impl_cr_tcp__00024jnicLoader
Java_abc_def_addon_impl_cr_xlc__00024jnicLoader
Java_abc_def_addon_impl_cr_xyl__00024jnicLoader
Java_abc_def_addon_impl_m_cvs__00024jnicLoader
Java_abc_def_addon_impl_m_dax__00024jnicLoader
Java_abc_def_addon_impl_m_lma__00024jnicLoader
Java_abc_def_addon_impl_m_plm__00024jnicLoader
Java_abc_def_addon_impl_m_qfd__00024jnicLoader
Java_abc_def_addon_impl_m_qmv__00024jnicLoader
Java_abc_def_addon_impl_m_swg__00024jnicLoader
Java_abc_def_addon_impl_m_vdm__00024jnicLoader
Java_abc_def_addon_impl_m_vnd__00024jnicLoader
Java_abc_def_addon_impl_p_abl__00024jnicLoader
Java_abc_def_addon_impl_p_alm__00024jnicLoader
Java_abc_def_addon_impl_p_asd__00024jnicLoader
Java_abc_def_addon_impl_p_clf__00024jnicLoader
Java_abc_def_addon_impl_p_cwl__00024jnicLoader
Java_abc_def_addon_impl_p_das__00024jnicLoader
Java_abc_def_addon_impl_p_jvj__00024jnicLoader
Java_abc_def_addon_impl_p_mnd__00024jnicLoader
Java_abc_def_addon_impl_p_neo__00024jnicLoader
Java_abc_def_addon_impl_p_opa__00024jnicLoader
Java_abc_def_addon_impl_p_plv__00024jnicLoader
Java_abc_def_addon_impl_p_pzd__00024jnicLoader
Java_abc_def_addon_impl_p_qss__00024jnicLoader
Java_abc_def_addon_impl_p_rod__00024jnicLoader
Java_abc_def_addon_impl_p_sud__00024jnicLoader
Java_abc_def_addon_impl_p_vkc__00024jnicLoader
Java_abc_def_addon_impl_p_xal__00024jnicLoader
Java_abc_def_addon_impl_p_xas__00024jnicLoader
Java_abc_def_addon_impl_r_ale__00024jnicLoader
Java_abc_def_addon_impl_r_bdf__00024jnicLoader
Java_abc_def_addon_impl_r_bol__00024jnicLoader
Java_abc_def_addon_impl_r_fal__00024jnicLoader
Java_abc_def_addon_impl_r_kas__00024jnicLoader
Java_abc_def_addon_impl_r_kla_000241__00024jnicLoader
Java_abc_def_addon_impl_r_kla__00024jnicLoader
Java_abc_def_addon_impl_r_lun__00024jnicLoader
Java_abc_def_addon_impl_r_pop__00024jnicLoader
Java_abc_def_addon_impl_r_qwe__00024jnicLoader
Java_abc_def_addon_impl_r_roc__00024jnicLoader
Java_abc_def_addon_impl_r_xma__00024jnicLoader
Java_abc_def_addon_settings_BooleanSetting__00024jnicLoader
Java_abc_def_addon_settings_ColorSetting__00024jnicLoader
Java_abc_def_addon_settings_ItemsSetting__00024jnicLoader
Java_abc_def_addon_settings_KeybindSetting__00024jnicLoader
Java_abc_def_addon_settings_ModeSetting__00024jnicLoader
Java_abc_def_addon_settings_NumberSetting__00024jnicLoader
Java_abc_def_addon_settings_RangeNumberSetting__00024jnicLoader
Java_abc_def_addon_settings_Setting__00024jnicLoader
Java_abc_def_addon_settings_TextSetting__00024jnicLoader
Java_abc_def_config_ConfigManager__00024jnicLoader
Java_abc_def_config_Config__00024jnicLoader
Java_abc_def_event_Data__00024jnicLoader
Java_abc_def_event_EventManager__00024jnicLoader
Java_abc_def_event_Event__00024jnicLoader
Java_abc_def_event_impl_entity_EntityAddedEvent__00024jnicLoader
Java_abc_def_event_impl_entity_EntityAttackEvent__00024jnicLoader
Java_abc_def_event_impl_entity_EntityDamageEvent__00024jnicLoader
Java_abc_def_event_impl_entity_EntityEffectTickEvent__00024jnicLoader
Java_abc_def_event_impl_entity_EntityHealEvent__00024jnicLoader
Java_abc_def_event_impl_entity_EntityPushEvent__00024jnicLoader
Java_abc_def_event_impl_entity_EntityRemovedEvent__00024jnicLoader
Java_abc_def_event_impl_entity_LivingEntityJumpEvent__00024jnicLoader
Java_abc_def_event_impl_entity_PlayerMoveEvent__00024jnicLoader
Java_abc_def_event_impl_game_ChatEvent__00024jnicLoader
Java_abc_def_event_impl_game_OpenScreenEvent__00024jnicLoader
Java_abc_def_event_impl_game_PacketEvent_00024Receive__00024jnicLoader
Java_abc_def_event_impl_game_PacketEvent__00024jnicLoader
Java_abc_def_event_impl_game_TickEvent_00024Pre__00024jnicLoader
Java_abc_def_event_impl_game_TickEvent__00024jnicLoader
Java_abc_def_event_impl_game_WindowEvent_00024Enter__00024jnicLoader
Java_abc_def_event_impl_game_WindowEvent_00024Focus__00024jnicLoader
Java_abc_def_event_impl_game_WindowEvent_00024FramebufferResize__00024jnicLoader
Java_abc_def_event_impl_game_WindowEvent_00024Move__00024jnicLoader
Java_abc_def_event_impl_game_WindowEvent_00024NameChanged__00024jnicLoader
Java_abc_def_event_impl_game_WindowEvent_00024Resize__00024jnicLoader
Java_abc_def_event_impl_input_KeyMappingClickedEvent__00024jnicLoader
Java_abc_def_event_impl_input_KeyboardEvent__00024jnicLoader
Java_abc_def_event_impl_input_MouseEvent__00024jnicLoader
Java_abc_def_event_impl_render_RenderHandEvent__00024jnicLoader
Java_abc_def_event_impl_render_RenderOverlayEvent_00024Post__00024jnicLoader
Java_abc_def_event_impl_render_RenderOverlayEvent_00024Pre__00024jnicLoader
Java_abc_def_event_impl_render_RenderOverlayEvent__00024jnicLoader
Java_abc_def_event_impl_render_RenderPlayerLabelEvent__00024jnicLoader
Java_abc_def_utils_AntiDump__00024jnicLoader
Java_abc_def_utils_BindingUtils__00024jnicLoader
Java_abc_def_utils_BlockUtils__00024jnicLoader
Java_abc_def_utils_ColorUtils__00024jnicLoader
Java_abc_def_utils_DamageUtils_000241__00024jnicLoader
Java_abc_def_utils_DamageUtils__00024jnicLoader
Java_abc_def_utils_EntityUtils__00024jnicLoader
Java_abc_def_utils_FileTransferable__00024jnicLoader
Java_abc_def_utils_GameUtils_00024Client__00024jnicLoader
Java_abc_def_utils_GameUtils__00024jnicLoader
Java_abc_def_utils_GifDecoder__00024jnicLoader
Java_abc_def_utils_HttpUtils__00024jnicLoader
Java_abc_def_utils_InventoryUtils_000241__00024jnicLoader
Java_abc_def_utils_InventoryUtils__00024jnicLoader
Java_abc_def_utils_ItemUtils__00024jnicLoader
Java_abc_def_utils_KeyUtils__00024jnicLoader
Java_abc_def_utils_LevelUtils__00024jnicLoader
Java_abc_def_utils_MenuUtils__00024jnicLoader
Java_abc_def_utils_Mth__00024jnicLoader
Java_abc_def_utils_RandomUtils__00024jnicLoader
Java_abc_def_utils_RotationUtils__00024jnicLoader
Java_abc_def_utils_Rotation__00024jnicLoader
Java_abc_def_utils_TaskUtil__00024jnicLoader
Java_abc_def_utils_cosmetics_AnimatedCape__00024jnicLoader
Java_abc_def_utils_cosmetics_CapeManager__00024jnicLoader
Java_abc_def_utils_cosmetics_Cape__00024jnicLoader
Java_abc_def_utils_cosmetics_StaticCape__00024jnicLoader
Java_abc_def_utils_cosmetics_renderer_CapeRenderer__00024jnicLoader
Java_abc_def_utils_friends_FriendManager__00024jnicLoader
Java_abc_def_utils_friends_Friend__00024jnicLoader
Java_abc_def_utils_o_s__00024jnicLoader
Java_abc_def_utils_render_f_FontRenderer_000241__00024jnicLoader
Java_abc_def_utils_render_f_FontRenderer_00024DrawEntry__00024jnicLoader
Java_abc_def_utils_render_f_GlyphMap__00024jnicLoader
Java_abc_def_utils_render_f_GlyphPageRenderer__00024jnicLoader
Java_abc_def_utils_render_f_Glyph__00024jnicLoader
Java_abc_def_utils_render_f_IFont__00024jnicLoader
Java_abc_def_utils_render_impl_Renderer3D_00024HeartType__00024jnicLoader

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be3d4fb62db9fbfcc2dd467b4d4b9940

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-runtime-l1-1-0

kernel32

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 326KB - Virtual size: 325KB

.data Size: 512B - Virtual size: 36KB

.pdata Size: 25KB - Virtual size: 24KB

.tls Size: 512B - Virtual size: 16B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 326KB - Virtual size: 325KB

.data
Size: 512B - Virtual size: 36KB

.pdata
Size: 25KB - Virtual size: 24KB

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 10KB - Virtual size: 9KB