81905e21cb136250f2532927d2186ad9a4cfec0e1c4285965c6bb598c589b430

Sharing

Copy URL Twitter E-mail

General

Target

81905e21cb136250f2532927d2186ad9a4cfec0e1c4285965c6bb598c589b430
Size

680KB
MD5

405bf509f242c018e489b2f187b46250
SHA1

8743c0d70441ca53e271a700f6e690326764d7b5
SHA256

81905e21cb136250f2532927d2186ad9a4cfec0e1c4285965c6bb598c589b430
SHA512

a8c7c76d63746b1f0bac500d011e5925f8b99b7c1329417056e09ba6aa3d76ed661815e280617401f549fbf29867babbf7e0b2c4efe6ee61afda32ff3e389a34
SSDEEP

12288:e1bbtyXqqATdHGonKC0XgpMaOrHku5Yas2/QnW0wLRIJ2c:u/toamot0dkis2/QnMR1c

Score

N/A

Malware Config

Signatures

Files

81905e21cb136250f2532927d2186ad9a4cfec0e1c4285965c6bb598c589b430
.dll regsvr32 windows x86

edbfabeabfe086fd54ecf716d0b816d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dk2win32

DK2ReadDownCounter
DK2DriverInstalled
DK2SendAlgorithmString
DK2ReadRandomNumbers
DK2DecrementDownCounter
DK2ReadMemory
DK2Success
DK2ThroughEncryption
FindDK2

mfc42

ord922
ord941
ord4277
ord2764
ord4129
ord5683
ord287
ord6139
ord5857
ord610
ord2614
ord4189
ord535
ord913
ord539
ord2915
ord1168
ord861
ord860
ord6778
ord924
ord537
ord4160
ord2818
ord858
ord540
ord398
ord700
ord600
ord561
ord2725
ord4424
ord4622
ord3738
ord3079
ord3825
ord4080
ord3830
ord2976
ord3831
ord2985
ord3262
ord1131
ord800
ord3953
ord3081
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord815
ord6467
ord1578
ord4274
ord1116
ord1176
ord823
ord1575
ord1577
ord1182
ord342
ord1243
ord269
ord826
ord1570
ord1197
ord825
ord1255
ord1253

msvcrt

vfprintf
strcat
_access
fopen
fclose
fflush
fprintf
memset
_mbscmp
fseek
strcpy
_stricmp
fread
rename
remove
_mbschr
_mbsinc
sprintf
_vsnprintf
strlen
_mbsninc
__CxxFrameHandler
_purecall
memcpy
free
realloc
malloc
memcmp
_itoa
_makepath
_splitpath
strtok
_CxxThrowException
wcslen
swprintf
_ltoa
wcsncpy
rand
strrchr
toupper
__dllonexit
srand
time
_except_handler3
_onexit
??1type_info@@UAE@XZ
_adjust_fdiv
?terminate@@YAXXZ
_initterm

kernel32

GlobalAlloc
InterlockedDecrement
lstrlenA
LockResource
GlobalHandle
DeleteCriticalSection
InitializeCriticalSection
GetCurrentDirectoryA
OutputDebugStringA
LeaveCriticalSection
GetCurrentThreadId
GetLocalTime
EnterCriticalSection
FindFirstFileA
GetModuleFileNameA
SystemTimeToFileTime
GetCurrentProcessId
GetSystemTime
GetVersionExA
GetTickCount
InterlockedIncrement
GetShortPathNameA
GetModuleHandleA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
SetCurrentDirectoryA
FormatMessageA
LocalAlloc
LocalFree
MulDiv
GetCPInfo
lstrcmpA
GlobalLock
GlobalUnlock
lstrcpynA
lstrcmpiA
GlobalFree
FreeResource
GetCurrentProcess
FlushInstructionCache
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
HeapDestroy
IsDBCSLeadByte

user32

DestroyWindow
CreateAcceleratorTableA
GetDesktopWindow
CreateWindowExA
GetClassNameA
RedrawWindow
SetWindowPos
IsWindow
GetClientRect
ReleaseCapture
wsprintfA
EndPaint
GetDC
ReleaseDC
SetFocus
CallWindowProcA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
FillRect
WinHelpA
BeginPaint
DefWindowProcA
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateDialogIndirectParamA
GetDlgItem
IsChild
ShowWindow
CharNextA
GetFocus
GetParent
SetWindowLongA
EnumChildWindows
UnionRect
PtInRect
DrawTextA
FindWindowA
SendMessageA
InvalidateRect
InvalidateRgn
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
SetCapture
RegisterWindowMessageA
SetCursor
MessageBoxA
PostMessageA
LoadStringA
MoveWindow
GetWindowRect
IsWindowEnabled
GetDialogBaseUnits
EnableWindow
GetWindow
GetWindowLongA
GetSysColor
GetKeyState
IsDialogMessageA

gdi32

CreateFontIndirectA
GetTextMetricsA
GetTextExtentPointA
CreateDCA
LPtoDP
SetMapMode
SetViewportOrgEx
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
DeleteObject
CreateSolidBrush
GetObjectA
SetBkColor
GetStockObject
SelectObject
Rectangle
SetTextColor
SetBkMode

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA

ole32

OleSaveToStream
ProgIDFromCLSID
OleRun
CreateOleAdviseHolder
OleLockRunning
StringFromCLSID
CLSIDFromString
CLSIDFromProgID
OleInitialize
CreateStreamOnHGlobal
OleUninitialize
WriteClassStm
OleLoadFromStream
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs

olepro32

ord253
ord254
ord250

oleaut32

GetErrorInfo
SysStringLen
SysAllocStringLen
LoadRegTypeLi
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
RegisterTypeLi
SysAllocString
LoadTypeLi
VarUI4FromStr
VariantClear
SysFreeString
SafeArrayDestroy
DispCallFunc
SetErrorInfo
CreateErrorInfo
VariantInit

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

edbfabeabfe086fd54ecf716d0b816d1

Headers

File Characteristics

Imports

dk2win32

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

ole32

olepro32

oleaut32

Exports

Exports

Sections

.text Size: 224KB - Virtual size: 220KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 24KB - Virtual size: 27KB

.idata Size: 12KB - Virtual size: 8KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 16KB - Virtual size: 12KB

.text Size: 360KB - Virtual size: 360KB

.text
Size: 224KB - Virtual size: 220KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 24KB - Virtual size: 27KB

.idata
Size: 12KB - Virtual size: 8KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 16KB - Virtual size: 12KB

.text
Size: 360KB - Virtual size: 360KB