GCCV2x64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

GCCV2x64.dll
Size

512KB
MD5

f0870cf2e9d9f05708c1fa34230aeae7
SHA1

e48b6abe6312e72f09ed2568064040ac4dc99674
SHA256

0f29ddda9266c1849d5c5fdeabb87647044edab92200f5eb8b586528616c98b6
SHA512

750c31f77af243347774016d4112044ef01ac91b6fd4b5d972224944ca9777dee3bc793763fb42014883e481784b1ab4c0cef39fe53ac6743abb090a763cdd56
SSDEEP

12288:BthdHinmdTmo0Q3bB23Yrjy6KdDbD+kN:BthdHimdyo0Q3bMCjQDbD+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GCCV2x64.dll

Files

GCCV2x64.dll
.dll windows:6 windows x64 arch:x64

19df744a879c33a882af96da167c0675

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

AcquireSRWLockExclusive
AllocConsole
CloseHandle
CreateThread
CreateToolhelp32Snapshot
DecodePointer
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
OpenThread
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSRWLockExclusive
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
SetThreadContext
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SuspendThread
TerminateProcess
Thread32First
Thread32Next
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WakeAllConditionVariable

user32

CallWindowProcW
ClientToScreen
CloseClipboard
EmptyClipboard
FindWindowA
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClientRect
GetClipboardData
GetCursorPos
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetWindowThreadProcessId
LoadCursorW
MessageBoxA
OpenClipboard
ReleaseCapture
ScreenToClient
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetWindowLongPtrW
UnregisterClassW

msvcp140

?_Random_device@std@@YAIXZ
_Query_perf_counter
_Query_perf_frequency

d3d9

Direct3DCreate9

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
_purecall
memcmp
memcpy
memmove
memset
strchr
strstr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
fclose
fflush
freopen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll

api-ms-win-crt-math-l1-1-0

ceilf
cosf
floorf
fmodf
sinf
sqrtf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-string-l1-1-0

isprint
strcmp
strcpy
strlen
strncmp
strncpy

api-ms-win-crt-utility-l1-1-0

qsort

Sections

.text
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19df744a879c33a882af96da167c0675

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

d3d9

imm32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

Sections

.text Size: 442KB - Virtual size: 442KB

.rdata Size: 42KB - Virtual size: 42KB

.data Size: 2KB - Virtual size: 33KB

.pdata Size: 12KB - Virtual size: 12KB

.00cfg Size: 512B - Virtual size: 56B

.detourc Size: 8KB - Virtual size: 8KB

.detourd Size: 512B - Virtual size: 24B

.retplne Size: 512B - Virtual size: 140B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 424B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 442KB - Virtual size: 442KB

.rdata
Size: 42KB - Virtual size: 42KB

.data
Size: 2KB - Virtual size: 33KB

.pdata
Size: 12KB - Virtual size: 12KB

.00cfg
Size: 512B - Virtual size: 56B

.detourc
Size: 8KB - Virtual size: 8KB

.detourd
Size: 512B - Virtual size: 24B

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 424B

.reloc
Size: 1KB - Virtual size: 1KB