bass[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bass.dll
Size

2.8MB
MD5

7e1154fdba7d440f888f23ad27c9b3d2
SHA1

67c9e7155ba0104a146fe165a6a5c750aad537e4
SHA256

398a9f78bdbff90c9fe5f25446f003de7fa9e78f5bae043de88341ff3e9ecaa1
SHA512

845a98473239582b863aa6b9e267584007115768a343ee36f3bd4cc31611a4ce02903fb7fe8ec4d021511a2b7f0e9e18024de492970e414b73d748f8d3993b0d
SSDEEP

49152:roEwwt6VoZII+mbK0JSnepKGITmS869CsO0xTLbA58:8xbI+MVzfdsOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bass.dll

Files

bass.dll
.dll windows:6 windows x64 arch:x64

b8632fb96fb50ac5c9a64dc2586f0234

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveFileSpecA
StrStrIA

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
RtlDestroyProcessParameters
RtlCreateProcessParametersEx
RtlInitUnicodeString
RtlFreeHeap
RtlAllocateHeap

kernel32

WriteConsoleW
CreateFileW
GetConsoleMode
GetCommandLineA
SetLastError
GetCurrentProcessId
GetModuleHandleA
lstrlenA
lstrlenW
IsValidCodePage
GetACP
GetEnvironmentVariableA
CreateDirectoryA
CreateFileA
WriteFile
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessorNumber
GetTickCount
GetTickCount64
GetLargePageMinimum
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
GetOEMCP
GetUserDefaultLangID
GetSystemDefaultLangID
GetSystemDefaultLCID
K32EnumProcessModules
K32GetModuleFileNameExA
MultiByteToWideChar
WideCharToMultiByte
GetSystemDefaultUILanguage
GetCommandLineW
GetLastError
GetEnvironmentStrings
InitializeSListHead
VirtualQuery
ReadProcessMemory
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetCurrentThread
GetComputerNameExA
Sleep
GetSystemTimeAsFileTime
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
FindNextFileW
FindFirstFileExW
FindClose
QueryPerformanceCounter
GetFileType
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedFlushSList
RaiseException
GetModuleHandleW
GetStartupInfoW
GetConsoleOutputCP
OpenProcess
SetFilePointerEx
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent

user32

DestroyMenu
GetDialogBaseUnits
GetWindowDC
ArrangeIconicWindows
GetDesktopWindow
GetUpdateRect
GetMessageTime
GetTopWindow
GetShellWindow
GetParent
GetCursorPos
GetWindowTextLengthA
EndPaint
BeginPaint
GetSubMenu
GetCapture
GetActiveWindow
IsZoomed
AnyPopup
OpenIcon
IsWow64Message
GetMessagePos
GetLastActivePopup
GetCaretPos
GetCaretBlinkTime
GetCursor
EndMenu
GetSystemMenu
GetMenu
IsWindowEnabled
IsWindowUnicode
GetFocus
GetDlgCtrlID
IsIconic
IsWindowVisible
IsWindow
GetDoubleClickTime
GetForegroundWindow
GetMessageExtraInfo

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelFree
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetAttributeEx
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetLevelEx
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetAttributeEx
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStart
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_FXSetPriority
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_IsStarted
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginEnable
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 19.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8632fb96fb50ac5c9a64dc2586f0234

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

ntdll

kernel32

user32

Exports

Exports

Sections

.text Size: 234KB - Virtual size: 233KB

.rdata Size: 89KB - Virtual size: 88KB

.data Size: 6KB - Virtual size: 19.9MB

.pdata Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 234KB - Virtual size: 233KB

.rdata
Size: 89KB - Virtual size: 88KB

.data
Size: 6KB - Virtual size: 19.9MB

.pdata
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 2KB - Virtual size: 1KB