InternalMC[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
InternalMC.dll
Size 502KB
Sample260815-efcd2sycjc
SHA256 e236c8c1d416b97579e238f3867d920569df3dc8962454f08ada2e4e7e70af24
MD5 daebd1b18f14ad3d9debd216b6e5a284
SHA1 f76d3f60dda39969894c1f5eb7505b126f89f43e
SHA512 d620fd581a8c770c58fecb7520ac7b7f60fb3e8d812b0fc4a815f55f93f19f8881b8f02a3f6c148e282b04673e4a282d8c26c30357989d70dfc59c33694b72f8
SSDEEP 6144:kdtr0rGu6AG+w5CrRbJ9r/+0REy0e5pASilPKHRnSge59k98bXPIT5+gIZR9giHD:C11B+Kc99L+CBfAlls89kGA9xwoiHnC
TLSH
T1A0B49D45F1B887ECD43BA035919BB60FFA353464172086DB63E495682FE3BF0A6B6311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InternalMC.dll

File Explorer

InternalMC.dll

.dll 502KB

InternalMC.dll

IMPHASH 35af186291a70370cd894315694d0604
SHA256 e236c8c1d416b97579e238f3867d920569df3dc8962454f08ada2e4e7e70af24
MD5 daebd1b18f14ad3d9debd216b6e5a284
SHA1 f76d3f60dda39969894c1f5eb7505b126f89f43e
SHA512 d620fd581a8c770c58fecb7520ac7b7f60fb3e8d812b0fc4a815f55f93f19f8881b8f02a3f6c148e282b04673e4a282d8c26c30357989d70dfc59c33694b72f8
SSDEEP 6144:kdtr0rGu6AG+w5CrRbJ9r/+0REy0e5pASilPKHRnSge59k98bXPIT5+gIZR9giHD:C11B+Kc99L+CBfAlls89kGA9xwoiHnC
TLSH
T1A0B49D45F1B887ECD43BA035919BB60FFA353464172086DB63E495682FE3BF0A6B6311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

412248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Ness\Desktop\Nolva_minecraft_a_tester\Internal MC custom\x64\Release\InternalMC.pdb

opengl32

glCallLists glGenLists wglUseFontBitmapsW glDepthFunc glGetFloatv glColor4f glBegin glLineWidth wglGetCurrentDC glEnd glLoadMatrixf glRasterPos2f glPolygonOffset glGetIntegerv glPushAttrib glListBase glViewport glEnableClientState glPopAttrib glPolygonMode glBindTexture glGenTextures glVertexPointer glEnable glScissor glDisableClientState glColor3ub glVertex3f glPopMatrix glMatrixMode glBlendFunc glLoadIdentity glTexParameteri glDeleteTextures glTexCoordPointer glGetTexEnviv glTexImage2D glColorPointer glTexEnvi glDrawElements glDisable glPushMatrix glShadeModel glPixelStorei glOrtho

kernel32

IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind IsDebuggerPresent GetCurrentProcessId GetSystemTimeAsFileTime RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive VirtualQuery InitializeSListHead SetLastError VirtualQueryEx VirtualProtectEx ReleaseSRWLockExclusive VirtualFree VirtualProtect VirtualAlloc FlushInstructionCache SetThreadContext GetThreadContext ResumeThread SuspendThread GetCurrentThreadId GetCurrentProcess GetModuleHandleW CreateThread CloseHandle GetLocaleInfoA MultiByteToWideChar LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock WaitForSingleObject FreeLibraryAndExitThread Sleep GetLastError DisableThreadLibraryCalls GetCurrentThread TerminateThread

user32

GetCursorInfo DispatchMessageW GetAsyncKeyState IsWindow CallNextHookEx SetWindowLongPtrW GetWindowRect CallWindowProcW GetMonitorInfoW GetMessageW GetWindowThreadProcessId UnhookWindowsHookEx TranslateMessage SetWindowsHookExW PostThreadMessageW OpenClipboard CloseClipboard EmptyClipboard DefWindowProcW WindowFromDC GetClipboardData SetClipboardData GetKeyState GetMessageExtraInfo MonitorFromWindow ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos mouse_event

gdi32

SelectObject CreateFontA DeleteObject

shell32

ShellExecuteW

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list _CxxThrowException memchr memcmp __C_specific_handler memset memcpy __std_exception_copy __std_exception_destroy strchr strstr memmove __std_terminate

api-ms-win-crt-stdio-l1-1-0

ftell __acrt_iob_func __stdio_common_vsprintf_s fflush fclose fseek __stdio_common_vfprintf fwrite _wfopen __stdio_common_vsprintf __stdio_common_vsscanf fread

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strcmp strncpy strncmp

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

atan2f ceilf cosf fmodf acosf powf sinf sqrtf lroundf

api-ms-win-crt-runtime-l1-1-0

_initterm_e _invalid_parameter_noinfo_noreturn _crt_atexit _cexit _initterm _seh_filter_dll _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv

Name

.text

Size

403KB

Virtual Size

403KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

InternalMC.dll

opengl32

kernel32

user32

gdi32

shell32

imm32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic