rc62n0[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

rc62n0.rar
Size

500KB
MD5

06888708e24aa2bad5f12b668063e0d8
SHA1

ccdd7e12587ce16013fe5cbf5b3ac7ba9c7bd910
SHA256

83c390d82e19beec14d007b7350f4296c23ce9b3d131a3670ebb7424ad917410
SHA512

12a2306584678b9d39211945e162cc6af2ee12d6a82fec9e743f86f3d4b849086f50bd834dbc9cbb770d3ff0ec0aee027e63e67353552690bbb896c3cb57f1e2
SSDEEP

6144:EPYdyni6Kud+NRZpmrQJGnipcVTtRyyac/XGeodGJXYmzowTfM7t3zDu2v:4Ri6YHZQrQYiWlHPboMJNowTGFzD3

Score

N/A

Malware Config

Signatures

Files

rc62n0.rar
.dll regsvr32 windows x86

9ce056f8aa7425c9e5c947787e31ceea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CompareStringW
CompareStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
CloseHandle
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetOEMCP
GetACP
LoadLibraryA
HeapSize
InitializeCriticalSection
GetCPInfo
ReadFile
MultiByteToWideChar
VirtualProtect
RemoveDirectoryW
CreateEventW
LocalAlloc
LCMapStringW
Sleep
SetEndOfFile
SetFilePointer
GetConsoleMode
GetConsoleCP
WriteFile
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFileAttributesA
GetLastError
GetFileAttributesA
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
CreateFileA
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
SetEnvironmentVariableA

user32

GetMessageTime
EndDeferWindowPos
SetWindowTextW
GetDlgCtrlID
RemoveMenu
LoadBitmapW
SendMessageTimeoutW
CheckDlgButton
EndDialog
IntersectRect
CreateDialogIndirectParamW
OffsetRect
LoadIconW
IsDialogMessageW
InflateRect
LockWindowUpdate
GetIconInfo
CloseClipboard
GetSystemMenu
GetMessageW
SetCapture
DrawTextW
KillTimer
WindowFromPoint
ExitWindowsEx
GetMenuItemInfoW
GetDoubleClickTime

gdi32

PatBlt
StretchBlt
SetPixel
SelectObject
GetTextExtentPoint32W

ole32

CoRegisterClassObject
CoInitialize
CoRegisterSurrogate
OleUninitialize
OleInitialize
CoUninitialize

ws2_32

socket
ioctlsocket
inet_ntoa
WSAStartup
ntohl
inet_addr
WSACleanup
listen
send
recv

Exports

Exports

DllRegisterServer
Earlyother
Gasperhaps

Sections

.text
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ce056f8aa7425c9e5c947787e31ceea

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

ws2_32

Exports

Exports

Sections

.text Size: 416KB - Virtual size: 415KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 24KB - Virtual size: 105KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 416KB - Virtual size: 415KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 24KB - Virtual size: 105KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 8KB