bass[.]dll | Triage

Resubmissions

11/09/2024, 17:27

240911-v1mzaashlp 7

11/09/2024, 16:58

240911-vhb43a1hrq 7

Sharing

Copy URL

Twitter E-mail

General

Target

bass.dll
Size

11.6MB
MD5

3f88d153d07abbe5e92abfefd19f2871
SHA1

f467d51c01b9428baf9e430dfbf5199cc2aae67e
SHA256

0960548a895f142a33fea3b3042946342b7f3f16c395013113e12a34de1861ab
SHA512

cbe93e6fee3dbdb115e9d4084330fe0292f98fd10dccd124eef33b2746fed6060190a275498c542751b25e0f0acf054e732d5da909e5d47a984e98744abbf3f0
SSDEEP

196608:pKembY2pymhkhjA/4lfKvK2Bhw2tbSVOdODAwwTYFoUCJZRLi7Q+vVrlUHKzM12:pn2p+mMKS2BjCAtHUCRb+P9g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bass.dll

Files

bass.dll
.dll windows:6 windows x64 arch:x64

7aa92838978798079046f7a0ccfeaccf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveFileSpecA
StrStrIA

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
RtlUnwindEx
RtlDestroyProcessParameters
RtlCreateProcessParametersEx
RtlInitUnicodeString
RtlFreeHeap
RtlAllocateHeap

kernel32

WriteConsoleW
CreateFileW
GetConsoleMode
GetCommandLineA
SetLastError
GetTickCount
GetLargePageMinimum
GetModuleHandleA
lstrlenA
IsValidCodePage
GetSystemDefaultUILanguage
GetSystemDefaultLangID
GetEnvironmentStrings
GetEnvironmentVariableA
CreateDirectoryA
CreateFileA
GetFileAttributesA
WriteFile
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetCurrentProcessorNumber
GetTickCount64
FreeResource
LoadResource
LockResource
SizeofResource
lstrlenW
FindResourceA
GetUserDefaultLangID
GetSystemDefaultLCID
K32EnumProcessModules
K32GetModuleFileNameExA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetCurrentProcessId
OpenProcess
VirtualQuery
ReadProcessMemory
MapViewOfFile
UnhandledExceptionFilter
CreateFileMappingA
GetACP
GetOEMCP
GetComputerNameExA
lstrcmpiA
GetComputerNameA
Sleep
GetThreadUILanguage
IsDebuggerPresent
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
InitializeSListHead
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
TerminateProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
InterlockedFlushSList
RaiseException
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
GetConsoleOutputCP
UnmapViewOfFile
SetFilePointerEx
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter

user32

GetCaretBlinkTime
DestroyMenu
EndDeferWindowPos
BeginDeferWindowPos
GetMessageTime
GetMessagePos
GetShellWindow
GetParent
GetDesktopWindow
GetCaretPos
GetCursor
GetCursorPos
GetWindowTextLengthA
GetUpdateRect
EndPaint
BeginPaint
GetWindowDC
GetForegroundWindow
EndMenu
GetSubMenu
GetSystemMenu
GetMenu
GetActiveWindow
GetDialogBaseUnits
GetDlgCtrlID
IsZoomed
AnyPopup
IsIconic
IsWindowVisible
OpenIcon
GetLastActivePopup
GetTopWindow
IsWindowEnabled
IsWindowUnicode
GetFocus
IsWindow
GetDoubleClickTime
IsWow64Message
GetMessageExtraInfo
ArrangeIconicWindows
GetCapture

advapi32

GetUserNameA

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelFree
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetAttributeEx
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetLevelEx
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetAttributeEx
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStart
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_FXSetPriority
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_IsStarted
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginEnable
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

.text
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 19.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

7aa92838978798079046f7a0ccfeaccf

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

ntdll

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 529KB - Virtual size: 528KB

.rdata Size: 126KB - Virtual size: 125KB

.data Size: 6KB - Virtual size: 19.1MB

.pdata Size: 8KB - Virtual size: 7KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 10.9MB - Virtual size: 10.9MB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 529KB - Virtual size: 528KB

.rdata
Size: 126KB - Virtual size: 125KB

.data
Size: 6KB - Virtual size: 19.1MB

.pdata
Size: 8KB - Virtual size: 7KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 10.9MB - Virtual size: 10.9MB

.reloc
Size: 2KB - Virtual size: 1KB