6b4c48e158f9ecbb35bcebec8f3c138bfea34a9659db27d513d2ddc44306a79d

Sharing

Copy URL Twitter E-mail

General

Target

6b4c48e158f9ecbb35bcebec8f3c138bfea34a9659db27d513d2ddc44306a79d
Size

51KB
MD5

82b084e68f242b7fd09d797e04729b40
SHA1

992ba411a4f40c0f0fece4b6ee31e16a87459952
SHA256

6b4c48e158f9ecbb35bcebec8f3c138bfea34a9659db27d513d2ddc44306a79d
SHA512

c66c4493b78ea7f1b0646456a47428440d5ae3bce1862b21caa1ac91799b89a2e832a46a67ac44621afb766e5253b91fb057778e8889a5560771a2b7ab90f0a4
SSDEEP

768:yHGCZKoUL8KOMitKz8LkPfpzWE+4xkaBwXVKwjMiddIE5WTaXRyk9DT14n0:yzULhetqPPfpVLfaXMMMijIEQsRy0

Score

N/A

Malware Config

Signatures

Files

6b4c48e158f9ecbb35bcebec8f3c138bfea34a9659db27d513d2ddc44306a79d
.dll windows x86

3c7589008fc536db7ef9a9dfca74205d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

ZwCreateMutant
RtlGetLastWin32Error
ZwCreateMutant
ZwSetEvent
ZwClose
LdrGetProcedureAddress
ZwQuerySymbolicLinkObject
ZwReleaseSemaphore
ZwCreateTimer
NtCreateTimer
ZwQueryVirtualMemory

advapi32

RegQueryValueExA
RegOpenKeyExA

gdi32

SetTextColor

user32

wsprintfA
LoadIconA
GetKeyboardState
SetCaretPos
ScreenToClient
GetWindowPlacement
SetForegroundWindow
GetForegroundWindow
SetWindowTextA
UnhookWindowsHookEx
GetWindowLongA
GetParent
GetClientRect

clbcatq

OpenComponentLibraryOnStreamEx
OpenComponentLibraryOnMemEx
UpdateFromAppChange

kernel32

InterlockedExchange
WaitForSingleObject
GlobalUnlock
InterlockedDecrement
RtlUnwind
CreateFileA
FindClose
RaiseException
CloseHandle
GetFileType
EnterCriticalSection
GetDriveTypeA
VirtualAlloc
GetModuleHandleA
TlsSetValue

Exports

Exports

InternalGetUdpTable
CreateProcessNotify
DllClientCleanup
NTPTimeToNTFileTime
dns-lctr
GetRTTAndHopCount
DllClientStartup
SetIpTTL
SetIpStatistics
GetUdpStatistics
InternalSetIfEntry
InternalGetIfTable
CancelIPChangeNotify
GetFriendlyIfIndex
GetIpForwardTable
GetIcmpStatistics
GetNumberOfInterfaces
GetExtendedUdpTable
NhGetInterfaceNameFromDeviceGuid
InternalSetIpNetEntry
GetIfEntry
NhpAllocateAndGetInterfaceInfoFromStack
GetUniDirectionalAdapterInfo
GetIfTable
NhGetInterfaceNameFromGuid
IcmpParseReplies
InternalSetIpStats
CreateProxyArpEntry
GetIpAddrTable
CreateIpNetEntry
GetInterfaceInfo
DeleteIpNetEntry
InternalSetTcpEntry
GetAdapterIndex
GetIpErrorString
GetAdaptersAddresses
SendARP
IcmpSendEcho2
RestoreMediaSense
NotifyRouteChange
GetOwnerModuleFromUdpEntry
Icmp6SendEcho2
GetIpStatisticsEx
GetOwnerModuleFromUdp6Entry
GetExtendedTcpTable
GetOwnerModuleFromTcpEntry
GetBestRoute
DeleteIPAddress
InternalCreateIpNetEntry
InternalGetIpAddrTable
GetTcpStatistics
InternalGetIpForwardTable
GetIpStatistics
register_icmp
GetBestInterfaceEx
FlushIpNetTable
GetPerAdapterInfo
GetAdapterOrderMap
UnenableRouter
NTTimeToNTPTime
AddIPAddress
SetIfEntry
GetTcpTable
do_echo_req
IpReleaseAddress
SetAdapterIpAddress
AllocateAndGetIpAddrTableFromStack

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c7589008fc536db7ef9a9dfca74205d

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

advapi32

gdi32

user32

clbcatq

kernel32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB