SEiolib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SEiolib.dll
Size

236KB
MD5

55b6d95d636a885399d8f74864a851b0
SHA1

8d4e53dfd103b3ed6ac41fad65b436eabe546944
SHA256

8289c12b23608c77dcc2a13799b193c06b649e34fa7832bc0395aac8dab43020
SHA512

1d0821b229e442f7cba2ff30cfb5c17a8a35e6a1ef1573ddb46a31cfb09bc00554dda8c210216cbaabe37139086e46400e59d47b7b8f66e4a8b4ed81e38c56d8
SSDEEP

3072:XvcRIsvEU/9cZUl0LcXqpAQ5zcdXvacACPFUi1xKwr73I13cterujFTfDcT:X0RT8U/9cZW0om5zMv+iouFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SEiolib.dll

Files

SEiolib.dll
.dll windows:4 windows x86 arch:x86

d18c4219e5a2cfc2f4dd186046467c78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\SciEd2006\Source\Clone9\exe\release\SEiolib.pdb

Imports

kernel32

HeapFree
HeapAlloc
GetCommandLineA
GetProcessHeap
RtlUnwind
ExitProcess
RaiseException
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedIncrement
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleA
FormatMessageW
LocalFree
MulDiv
GlobalUnlock
GlobalFree
lstrlenW
InterlockedDecrement
FreeResource
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
GetCurrentProcessId
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
GetProcAddress
SizeofResource
LoadResource
GetTickCount
LockResource
FindResourceW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
SystemTimeToFileTime
SetFileTime
GetLastError
CloseHandle
FlushFileBuffers
GetFileSize
LCMapStringW
GetSystemTime

user32

GetSysColorBrush
UnregisterClassW
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextW
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
DestroyMenu
LoadCursorW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
SendMessageW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
KillTimer
GetSysColor
SetTimer
FillRect
MessageBoxW
GetParent
EnableWindow
GetSubMenu
UnregisterClassA

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
Polygon
SetMapMode
RestoreDC
SaveDC
GetDeviceCaps
GetObjectW
SetBkColor
GetClipBox
CreateBitmap
SetTextColor
GetStockObject
GetTextMetricsW
SetTextAlign
LineTo
CreateSolidBrush
CreatePen
SetBkMode
MoveToEx
DeleteObject
SelectObject
TextOutW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindExtensionW
PathFindFileNameW

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

DeleteTraceData
ImportTraceFile
TraceDialog
isTraceData
seqlibDisplayTraceView
seqlibEditTraceFile

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d18c4219e5a2cfc2f4dd186046467c78

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 24KB - Virtual size: 20KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 24KB - Virtual size: 20KB