hack[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

hack.dll
Size

2.2MB
MD5

7472dc3c10b24f768b25f65c3d247513
SHA1

898467cfa2c7c2eadfd5a6be2702f8ae26e9c8c5
SHA256

633c63459e25f71adacd72e0bf533401fc59c55e3c1300a5f3605239ab3e0370
SHA512

4f47da89e6b95500cb75df3d0021debfc179e6c062a4c2ec9bddec2f26beece61350f68087fce17a0db653d0f877a822b3763e25e9cb0f3a683d004d6c25991c
SSDEEP

49152:QlYcpxvAaekx8XQG25uduIEDxtvuso1W5Z+SYaMLn1tWENPz3/H5:QlVOUn3uXEDx5o4H/hkn1tWENL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hack.dll

Files

hack.dll
.dll windows:6 windows x86 arch:x86

7967d47669077a2b6b0c8c4a1566e3e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

opengl32

glDepthFunc
glVertex3fv
glVertex3f
glPointSize
glLineWidth
glEnd
glColor4f
glBegin
glTexEnvi
glDepthRange
glClearColor
glReadPixels
glViewport
glVertexPointer
glTexCoordPointer
glScissor
glPushMatrix
glPushAttrib
glPopMatrix
glPopAttrib
glPolygonMode
glPixelStorei
glOrtho
glMatrixMode
glLoadIdentity
glEnableClientState
glEnable
glDrawElements
glDisableClientState
glDisable
glColorPointer
glBlendFunc
glTexParameteri
glTexImage2D
glGetIntegerv
glGenTextures
glBindTexture

kernel32

LoadLibraryExW
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
VirtualQuery
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
MultiByteToWideChar
DecodePointer
EncodePointer
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
SetEndOfFile
GetTickCount
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetNativeSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadReadPtr
GlobalAlloc
GlobalUnlock
ReadFile
GlobalFree
QueryPerformanceCounter
QueryPerformanceFrequency
FindFirstFileA
GetPrivateProfileStringA
GetLastError
Sleep
CreateThread
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetLocalTime
GetCurrentProcess
ExitProcess
FlushInstructionCache
lstrlenA
lstrcmpA
CreateEventW
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
HeapReAlloc
DeleteFileW
ReadConsoleW
SetFilePointerEx
InitializeCriticalSectionAndSpinCount
GetFileSizeEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetModuleHandleExW
GetModuleFileNameW
GlobalLock
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection

user32

MessageBoxA
LoadCursorA
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
GetClientRect
ReleaseCapture
SetCapture
GetKeyState
GetActiveWindow
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
GetCapture
SetCursorPos
WindowFromDC
MapVirtualKeyA
GetKeyNameTextA
CallWindowProcA
SetWindowLongA
GetWindowLongA
GetWindowTextA
SetWindowTextA
GetDC
GetFocus
SetFocus
CreateWindowExA
SendMessageA
OpenClipboard

gdi32

SetBkMode

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

Sections

.text
Size: 761KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 818KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7967d47669077a2b6b0c8c4a1566e3e0

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

kernel32

user32

gdi32

imm32

Sections

.text Size: 761KB - Virtual size: 760KB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 26KB - Virtual size: 818KB

.msvcjmc Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 47KB - Virtual size: 46KB

.text
Size: 761KB - Virtual size: 760KB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 26KB - Virtual size: 818KB

.msvcjmc
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 47KB - Virtual size: 46KB