c6b8c03a69671649453c21bd90eacdb6e5af89e7ae9cbdc8edde1805ca286c7b

Sharing

Copy URL Twitter E-mail

General

Target

c6b8c03a69671649453c21bd90eacdb6e5af89e7ae9cbdc8edde1805ca286c7b
Size

156KB
MD5

f3c888061f82b56dbc84c90adea1e490
SHA1

4893aed8c0267dfb8fe51053fb6962cecdeb5106
SHA256

c6b8c03a69671649453c21bd90eacdb6e5af89e7ae9cbdc8edde1805ca286c7b
SHA512

b3d963dd2a8ed86ff23894b05c21fc29ac1e8e4294b70373c48f2e1f46b657e622886f15548e81c324598744e6a37a0bb1e424655345f6dd26d6710b9f84fc15
SSDEEP

3072:OetXZf8o4i4/8yKAD4WZ/k0a1/Qa3iD2rjfohyw:ppfnH8D4WZ/h6/Q5arjfwy

Score

N/A

Malware Config

Signatures

Files

c6b8c03a69671649453c21bd90eacdb6e5af89e7ae9cbdc8edde1805ca286c7b
.dll windows x86

f212a343d0026c20c437b68d91bbbbe0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateDirectoryA
GetProcessHeap
InterlockedCompareExchange
GetModuleHandleA
EnterCriticalSection
TerminateProcess
GetComputerNameA
WaitForSingleObject
SetLastError
CreateFileA
LeaveCriticalSection
LocalFree
CopyFileA
GetProcAddress
GetTickCount
OpenFileMappingA
CreateFileMappingA
CreateProcessA
GetModuleFileNameA
WriteFile
HeapAlloc
CloseHandle
CreateEventA
ReadProcessMemory
UnmapViewOfFile
MapViewOfFile
InterlockedDecrement
GetCommandLineA
GetVolumeInformationA
GlobalFree
LoadLibraryA
HeapFree
GlobalAlloc
InterlockedIncrement
GetLastError
ExitProcess
OpenEventA
GetCurrentProcess
WriteProcessMemory
CreateMutexW

ole32

CoInitialize
CoCreateGuid
OleSetContainedObject
CoTaskMemAlloc
CoSetProxyBlanket
CoUninitialize
OleCreate
CoCreateInstance

user32

DispatchMessageA
ScreenToClient
GetCursorPos
SetWindowsHookExA
UnhookWindowsHookEx
GetParent
GetWindow
CreateWindowExA
FindWindowA
KillTimer
SendMessageA
RegisterWindowMessageA
GetMessageA
GetClassNameA
ClientToScreen
DestroyWindow
DefWindowProcA
PeekMessageA
GetWindowThreadProcessId
TranslateMessage
PostQuitMessage
GetSystemMetrics
SetTimer
SetWindowLongA
GetWindowLongA

oleaut32

SysFreeString
SysAllocStringLen
SysAllocString
SysStringLen

shlwapi

StrStrIW
UrlUnescapeW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
DuplicateTokenEx
RegDeleteValueA
RegCreateKeyExA
GetUserNameA
SetTokenInformation
OpenProcessToken

shell32

SHGetFolderPathA

Exports

Exports

CatDBMouseMusic

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hrp
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f212a343d0026c20c437b68d91bbbbe0

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

shell32

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 960B

hrp Size: 4KB - Virtual size: 16B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 960B

hrp
Size: 4KB - Virtual size: 16B

.reloc
Size: 8KB - Virtual size: 6KB