overcontrolling[.]dat

General

Target

overcontrolling.dat
Size

65KB
MD5

a5f68be7c24e64ba676f8e2166c4f3bc
SHA1

9471307b32435ca0b167c7fe489d749f3d6be9bf
SHA256

34ea69c5f8fff37c821560db00a6536202679bad87b4c66b465ea8d2dfdaedad
SHA512

201390f7cf5d525ce487002fcb90a958a3edfcb6e484b84fc09677cc85a0464813a4ec10b79646e4583eabefb4fd8ac429fb6ee6626ea34912dfd45f78fe2fba
SSDEEP

768:b++Q+Y+8OY41CU2TOPEGNl0Dctg1uV3GP3aAWilda4jkmgzY7z6qZ7Z8OUK3kykN:bZOSp2asGEDc6wVWP0itUEZ8On3No

Score

N/A

Malware Config

Signatures

Files

overcontrolling.dat
.dll windows x64

6c75d693a7b8bda0a79f9fa72e6392e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetConsoleMode
ReadConsoleInputW
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
SetConsoleOutputCP
GetConsoleScreenBufferInfo
VirtualAlloc
SetConsoleCursorPosition
SetConsoleTextAttribute
SetConsoleWindowInfo
ScrollConsoleScreenBufferW
ReadConsoleOutputW
SetConsoleTitleW
GetConsoleDisplayMode
GetConsoleCP
CreateEventA
SetConsoleScreenBufferSize
WaitForSingleObject

gdi32

GetKerningPairsW
CreateEllipticRgn
GetFontLanguageInfo

msvfw32

ICImageCompress
DrawDibStart
ICDraw

rasapi32

RasCreatePhonebookEntryA
RasSetAutodialAddressA
RasInvokeEapUI

ole32

OleFlushClipboard
CoReleaseServerProcess

Exports

Exports

ATCYtIYmQYjhxXG
EsuLYMylegg
FdvQyzwAlBpvxN
OSgXlDBaqUl
TUyhjhxYXmGfldD
XEDMlPLSCamvto
bUgRyaKgsQhR
fEHelJaevryi
fnmuilrhauwj
gUuTnljsaPMFtOtY
iuzRgzSzalCwkg
kjYULuSPZVEJC
uhandahygstdgahuisjdjnsuays
yxqywsmmZHXY

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c75d693a7b8bda0a79f9fa72e6392e9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

msvfw32

rasapi32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 480B