pasdoasdoasodaosdosaodoaosaodoadosaodappp[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

pasdoasdoasodaosdosaodoaosaodoadosaodappp.dll
Size

542KB
MD5

2ef4112d6243bacbb0e4c42331208067
SHA1

57a6ee88c98d4929976e0b3cc5d103cea1544695
SHA256

506a3e400e44eaa3f8ca9d8d775d822cd54b8bde939f91260d8382191efbc89b
SHA512

79ddb853fd60893b103c6f911a001a92f2ede63f8599ccfafef017cb3a948a81a6008b82d894f39db4b210d37323a671be7647353dbb712ef8092b159c35980e
SSDEEP

6144:IBHR3elKEKFhAmuOqQQi5i86C3U4ShLjwnFgZxRvANlT0O7Uno0mNFUPx4k00wEO:IBH0lurLZUDLEFgZx0t7UnouPuktwED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pasdoasdoasodaosdosaodoaosaodoadosaodappp.dll

Files

pasdoasdoasodaosdosaodoaosaodoadosaodappp.dll
.dll windows:6 windows x64 arch:x64

5d6b162dcdb2d7f62f4f13444dede5e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\04.07.2024\major\dll\x64\Release\pasdoasdoasodaosdosaodoaosaodoadosaodappp.pdb

Imports

kernel32

CreateThread
HeapAlloc
GetProcAddress
GetProcessHeap
WideCharToMultiByte
lstrcmpiW
AllocConsole
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
FreeLibrary
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
SetEvent
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
Process32FirstW
CreateFileA
Process32NextW
Sleep
MultiByteToWideChar
CreateEventW
CloseHandle
CreateToolhelp32Snapshot
GetModuleHandleA
CreateFileW
DeviceIoControl
DeleteCriticalSection

user32

GetKeyboardState
ScreenToClient
ToUnicodeEx
LoadCursorW
SetCursor
SetCursorPos
GetKeyboardLayout
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetWindowLongW
DefWindowProcW
GetKeyState
GetWindow
GetWindowRect
DestroyWindow
SetWindowPos
CreateWindowExW
GetSystemMetrics
RegisterClassExW
ShowWindow
GetAsyncKeyState
DispatchMessageW
ClientToScreen
PeekMessageW
GetCursorPos
UpdateWindow
FindWindowA
GetForegroundWindow
SystemParametersInfoW
PostQuitMessage
MoveWindow
GetClientRect
SetWindowLongW
TranslateMessage

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

dwmapi

DwmExtendFrameIntoClientArea

d3d11

D3D11CreateDeviceAndSwapChain

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
ImmAssociateContextEx

d3dcompiler_47

D3DCompile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
memchr
memcmp
memcpy
__std_terminate
strstr
memmove
__C_specific_handler
__current_exception
__current_exception_context
memset

api-ms-win-crt-runtime-l1-1-0

exit
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vsscanf
_wfopen
fflush
fclose
fseek
__stdio_common_vsprintf_s
ftell
freopen
fread
__stdio_common_vsprintf
fwrite
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-math-l1-1-0

cosf
cos
atan2f
ceilf
fmodf
acosf
powf
sin
sinf
sqrtf
tanf

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcmp

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-utility-l1-1-0

qsort

Sections

.text
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 158KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d6b162dcdb2d7f62f4f13444dede5e6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

dwmapi

d3d11

imm32

d3dcompiler_47

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

Sections

.text Size: 313KB - Virtual size: 313KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 158KB - Virtual size: 159KB

.pdata Size: 13KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 512B - Virtual size: 460B

.text
Size: 313KB - Virtual size: 313KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 158KB - Virtual size: 159KB

.pdata
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 512B - Virtual size: 460B