7f66770624e2d4bd51029a71cf7311cb873ee6fff6a694e4235577d0322a9937[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

7f66770624e2d4bd51029a71cf7311cb873ee6fff6a694e4235577d0322a9937.dll
Size

910KB
MD5

e6092582959219117440fbdd77d2cc53
SHA1

2722f891bf534e763b5b742b7e5ece905ab35137
SHA256

7f66770624e2d4bd51029a71cf7311cb873ee6fff6a694e4235577d0322a9937
SHA512

cc3af1232eca53509171688a8df4e242d28cd25213580cfde357ba6c8e6d1408d25c50847cf835db53feff175beb3a0cc32e98c35fda71c0291ff62ecbd0f2cd
SSDEEP

24576:lLaUDWCxeIacvy1wf0nWtq3f2PeIm/DEhbgD1yhr4+1zDw4bDz:lLtDWCxeIaYy+f1E3OPeImrEtgDchr46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f66770624e2d4bd51029a71cf7311cb873ee6fff6a694e4235577d0322a9937.dll

Files

7f66770624e2d4bd51029a71cf7311cb873ee6fff6a694e4235577d0322a9937.dll
.dll windows:6 windows x86 arch:x86

2a436809b709aeaf681e453703a73cdc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
SetLastError
HeapAlloc
HeapReAlloc
GetProcessHeap
GetCurrentProcessId
ExitProcess
GetCurrentThread
GetCurrentThreadId
CreateProcessW
GetCurrentProcessorNumber
GetTickCount
GetWindowsDirectoryW
GetLargePageMinimum
GetModuleHandleA
lstrlenA
lstrlenW
IsBadReadPtr
IsValidCodePage
GetACP
GetSystemDefaultUILanguage
GetSystemDefaultLangID
GetSystemDefaultLCID
GetThreadUILanguage
GetCommandLineA
GetOEMCP
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
CloseHandle
WriteFile
FlushFileBuffers
SetStdHandle
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCPInfo
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
GetModuleFileNameW
GetModuleHandleExW
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
GetEnvironmentStrings
SetEnvironmentVariableW
GetEnvironmentVariableW
GetConsoleOutputCP
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwind
InterlockedFlushSList
EncodePointer
EnterCriticalSection
DecodePointer

user32

GetDialogBaseUnits
ArrangeIconicWindows
GetLastActivePopup
GetTopWindow
GetShellWindow
GetParent
GetDesktopWindow
GetCaretBlinkTime
GetCursor
GetCursorPos
GetWindowTextLengthA
GetUpdateRect
EndPaint
BeginPaint
GetWindowDC
GetForegroundWindow
EndMenu
DestroyMenu
GetSystemMenu
GetMenu
IsWindowEnabled
IsWindowUnicode
GetCapture
GetFocus
GetActiveWindow
GetDlgCtrlID
IsZoomed
AnyPopup
IsIconic
IsWindowVisible
EndDeferWindowPos
BeginDeferWindowPos
OpenIcon
IsWindow
GetDoubleClickTime
GetMessageExtraInfo
GetMessageTime
GetMessagePos
wsprintfW
GetSubMenu

advapi32

RegSetValueExW
RegCreateKeyExW
RegCloseKey

shell32

SHCreateDirectoryExW

shlwapi

StrCmpIW
PathAppendW

Exports

Exports

DllInit
DllInitialize
DllInstall
DllUninitialize
Export
ExportDll
Init
Main
ThreadFunction
Uninitialize
UnregisterDll
_Uninitialize
curl_easy_cleanup
curl_easy_init
curl_easy_perform
curl_easy_setopt

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a436809b709aeaf681e453703a73cdc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 694KB - Virtual size: 693KB

.rdata Size: 143KB - Virtual size: 142KB

.data Size: 3KB - Virtual size: 5.8MB

.reloc Size: 69KB - Virtual size: 68KB

.text
Size: 694KB - Virtual size: 693KB

.rdata
Size: 143KB - Virtual size: 142KB

.data
Size: 3KB - Virtual size: 5.8MB

.reloc
Size: 69KB - Virtual size: 68KB