General

Malware Config

Signatures

Files

• clowns.zip

  .zip
• cocking.temp

  .dll windows x86

  060ac25334ec9db348ade902cce3d445

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CreateDirectoryA

  CreateDirectoryW

  CreateFileA

  CreateFileW

  FileTimeToLocalFileTime

  FindFirstFileA

  FindFirstFileW

  FindNextChangeNotification

  GetDriveTypeA

  GetDriveTypeW

  GetFileAttributesA

  GetFileAttributesW

  GetFileInformationByHandle

  GetFullPathNameW

  GetFullPathNameA

  GetLogicalDriveStringsW

  LocalFileTimeToFileTime

  LockFile

  SetFileAttributesA

  SetFileAttributesW

  SetUnhandledExceptionFilter

  SetErrorMode

  SetNamedPipeHandleState

  TransactNamedPipe

  WaitNamedPipeW

  QueryPerformanceCounter

  QueryPerformanceFrequency

  DeviceIoControl

  LeaveCriticalSection

  ReleaseMutex

  OpenMutexW

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThread

  GetCurrentThreadId

  TlsAlloc

  TlsGetValue

  TlsFree

  GetThreadContext

  GetSystemInfo

  GetLocalTime

  GetVersion

  SetLocalTime

  GetTickCount

  GetSystemDirectoryA

  GetSystemDirectoryW

  GetWindowsDirectoryA

  GetWindowsDirectoryW

  SetSystemTime

  VirtualProtect

  ReadProcessMemory

  VirtualLock

  VirtualUnlock

  FindResourceExW

  GetModuleFileNameA

  GetModuleHandleA

  GetModuleHandleW

  LoadResource

  FindResourceW

  LoadLibraryA

  LoadLibraryW

  GlobalAlloc

  LocalAlloc

  SetHandleCount

  SetCommMask

  SetCommState

  SetCommTimeouts

  MulDiv

  lstrcmpA

  lstrcmpiA

  lstrlenA

  lstrlenW

  GlobalAddAtomA

  WriteProfileStringW

  GetPrivateProfileIntW

  MoveFileA

  CompareFileTime

  IsBadWritePtr

  IsBadCodePtr

  IsBadStringPtrA

  IsBadStringPtrW

  SystemTimeToFileTime

  GetConsoleCP

  GetConsoleOutputCP

  ReadConsoleInputA

  ReadConsoleInputW

  PeekConsoleInputA

  ReadConsoleA

  ReadConsoleW

  WriteConsoleA

  WriteConsoleW

  SetConsoleCtrlHandler

  GetConsoleScreenBufferInfo

  SetFilePointerEx

  GetConsoleMode

  WriteFile

  FlushFileBuffers

  HeapReAlloc

  HeapSize

  GetStringTypeW

  GetFileType

  GetProcessHeap

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  WideCharToMultiByte

  GetCommandLineW

  GetCPInfo

  GetOEMCP

  GetACP

  CloseHandle

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  FindClose

  DecodePointer

  MoveFileExW

  LCMapStringW

  MultiByteToWideChar

  HeapAlloc

  HeapFree

  GetModuleFileNameW

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  FreeLibrary

  TlsSetValue

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  EnterCriticalSection

  EncodePointer

  SetLastError

  GetLastError

  InterlockedFlushSList

  RtlUnwind

  RaiseException

  TerminateProcess

  InitializeSListHead

  GetSystemTimeAsFileTime

  GetStartupInfoW

  UnhandledExceptionFilter

  IsDebuggerPresent

  IsProcessorFeaturePresent

  SetCurrentDirectoryW

  SetCurrentDirectoryA

  ExpandEnvironmentStringsW

  SetEnvironmentVariableW

  GetCommandLineA

  SetStdHandle

  GetStdHandle

  VirtualAllocEx

  VirtualAlloc

  GetTickCount64

  ExitThread

  WaitForSingleObjectEx

  CreateThread

  MoveFileW

  ExitProcess

  user32

  IsWindowVisible

  SetForegroundWindow

  DialogBoxParamA

  SystemParametersInfoW

  LoadIconW

  LoadBitmapW

  SetWindowsHookExW

  GetWindow

  GetWindowThreadProcessId

  FindWindowW

  GetDesktopWindow

  GetSysColor

  MapWindowPoints

  ScreenToClient

  GetCaretBlinkTime

  GetCursor

  GetCursorPos

  MessageBoxExW

  MessageBoxW

  MessageBoxA

  AdjustWindowRectEx

  GetWindowTextLengthW

  GetPropW

  GetScrollPos

  SetScrollPos

  ValidateRect

  GetDC

  GetDlgItemTextW

  SetActiveWindow

  LoadMenuW

  GetSystemMetrics

  SetCapture

  MapVirtualKeyW

  GetKeyboardState

  GetKeyState

  GetFocus

  CharUpperW

  GetClipboardData

  SetClipboardData

  OpenClipboard

  GetDlgCtrlID

  CheckRadioButton

  CheckDlgButton

  SetWindowPlacement

  FlashWindow

  UnregisterClassA

  AttachThreadInput

  SendMessageCallbackW

  SendNotifyMessageW

  SendMessageTimeoutW

  RegisterWindowMessageW

  GetProcessWindowStation

  GetThreadDesktop

  GetKeyboardLayoutNameW

  GetKeyboardLayoutNameA

  ActivateKeyboardLayout

  FindWindowA

  SetTimer

  EndDialog

  gdi32

  SetDIBitsToDevice

  GetStockObject

  GetRgnBox

  GetRegionData

  CreateSolidBrush

  CreateRectRgn

  CreateFontIndirectW

  CreateDIBitmap

  CreateDCW

  CreateBitmap

  CreatePolygonRgn

  advapi32

  RegNotifyChangeKeyValue

  RegCloseKey

  ole32

  CoInitializeEx

  CoCreateGuid

  shlwapi

  PathFileExistsA

  PathGetDriveNumberA

  PathFindSuffixArrayA

  StrToIntA

  ord155

  PathFindExtensionA

  PathFindOnPathA

  Exports

  Exports

  DllUnregisterServer

  DrawThemeIcon

  barmskin

  hemocyte

  ilicaceae

  inapostate

  periodontologist

  pigweed

  postern

  pugnaciousness

  trichosanthes

  Sections

  .text

  Size: 645KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 418KB - Virtual size: 417KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 52KB - Virtual size: 51KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• run.bat