OxyClient-P-v1[.]5[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

OxyClient-P-v1.5.dll
Size

6.0MB
MD5

fbc1594f09455820d3174f31773c180c
SHA1

0545b8ace845eeb18ecb08704f03eb3c9506a22a
SHA256

acbe62e37d4c53fb2026e0bab46093a57f287cceed766abbbd925a3bc5094171
SHA512

c95102fc8f9a5bc94055ea261ebd9820b1f5992e19a8d018e74354d80f2915fe744d32e37257dee17ad5c022bd01b99beea3123c9489c782d74f641768bb6018
SSDEEP

98304:clqcv3dArFKWeC1Tj59vPCFjTHrpuyZRXl208FA:clqcv3dArFKWeC1Tj59vPCFjTHrpuyZh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OxyClient-P-v1.5.dll

Files

OxyClient-P-v1.5.dll
.dll windows:6 windows x64 arch:x64

e8560a5ffde245002bdcc28da494caba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

winmm

PlaySoundA

jvm

JNI_GetCreatedJavaVMs

opengl32

glDepthFunc
glGenTextures
glEnableClientState
glEnable
glDrawElements
glDisableClientState
glDisable
glDeleteTextures
glColorPointer
glBlendFunc
glBindTexture
glGetTexEnviv
glLoadIdentity
glMatrixMode
glOrtho
glPixelStorei
glPushMatrix
glPolygonMode
glPopAttrib
glPopMatrix
glPushAttrib
glGetIntegerv
glScissor
glShadeModel
glTexCoordPointer
glTexEnvi
glTexImage2D
glClearColor
wglMakeCurrent
wglGetCurrentContext
wglDeleteContext
wglCreateContext
glViewport
glVertexPointer
glTexParameteri

kernel32

RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateToolhelp32Snapshot
GetModuleHandleW
VirtualProtect
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
SuspendThread
OpenThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
Sleep
HeapFree
IsProcessorFeaturePresent
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
HeapReAlloc
Thread32Next
CreateThread
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
CloseHandle
GetLastError
HeapCreate
HeapDestroy
HeapAlloc
Thread32First

user32

GetAsyncKeyState
WindowFromDC
LoadCursorA
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
GetForegroundWindow
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetKeyState
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetClipboardData
TrackMouseEvent

msvcp140

_Query_perf_counter
_Query_perf_frequency
?_Xlength_error@std@@YAXPEBD@Z
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
_Xtime_get_ticks
?_Random_device@std@@YAIXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow

vcruntime140

memmove
strstr
memchr
memset
memcmp
__RTDynamicCast
__current_exception
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list
__std_exception_destroy
_purecall
memcpy
__std_terminate
__std_exception_copy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
terminate
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_beginthreadex

api-ms-win-crt-stdio-l1-1-0

_wfopen
fread
fwrite
__stdio_common_vsprintf
__stdio_common_vsscanf
ftell
fseek
__acrt_iob_func
fflush
__stdio_common_vsprintf_s
fclose
__stdio_common_vfprintf
freopen_s

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-string-l1-1-0

strncmp
tolower
strcmp
strncpy

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-math-l1-1-0

fminf
sin
atan2
fmod
fmodf
sinf
sqrtf
acosf
ceilf
cosf
sqrt
fmaxf
atan2f
log
logf
pow
powf
cos

api-ms-win-crt-convert-l1-1-0

atof

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8560a5ffde245002bdcc28da494caba

Headers

DLL Characteristics

File Characteristics

Imports

winmm

jvm

opengl32

kernel32

user32

msvcp140

imm32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

Sections

.text Size: 714KB - Virtual size: 713KB

.rdata Size: 3.9MB - Virtual size: 3.9MB

.data Size: 1.3MB - Virtual size: 1.3MB

.pdata Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 714KB - Virtual size: 713KB

.rdata
Size: 3.9MB - Virtual size: 3.9MB

.data
Size: 1.3MB - Virtual size: 1.3MB

.pdata
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 1KB