qakbot | 024699cb6719a8266438bf9aa0bdefd96bc5675c5319488ed428001ff7eaa8c3[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
024699cb6719a8266438bf9aa0bdefd96bc5675c5319488ed428001ff7eaa8c3.dll
Size 134KB
Sample230221-s2d2nafc86
SHA256 024699cb6719a8266438bf9aa0bdefd96bc5675c5319488ed428001ff7eaa8c3
MD5 85cb8ae7d16f46c45e4dc10f3e2ed2cb
SHA1 be140513c526296b45ee1d7d0fd9d6b6dc233a3a
SHA512 d4ccdc7dd139b9cfab5f99284abc2d8be1f6686203987943a5b11b074c5a5c2f8fa43b20132f4ee5870df20cd00e0e87b502c4d5ee40f5cf34a5ee5e7e3061d5
SSDEEP 3072:KxUBKbkUOwRmBXmn/98wv77pUgAQJG7BfQTBf/LooR:6Dglo98anKVQJ2BfQTBXLooR
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

qakbot

Malware Config

Signatures

Qakbot family
qakbot

File Explorer

024699cb6719a8266438bf9aa0bdefd96bc5675c5319488ed428001ff7eaa8c3.dll

.dll 134KB

024699cb6719a8266438bf9aa0bdefd96bc5675c5319488ed428001ff7eaa8c3.dll

IMPHASH 1bd51003f5494b32d39257bf6bbbb175
SHA256 024699cb6719a8266438bf9aa0bdefd96bc5675c5319488ed428001ff7eaa8c3
MD5 85cb8ae7d16f46c45e4dc10f3e2ed2cb
SHA1 be140513c526296b45ee1d7d0fd9d6b6dc233a3a
SHA512 d4ccdc7dd139b9cfab5f99284abc2d8be1f6686203987943a5b11b074c5a5c2f8fa43b20132f4ee5870df20cd00e0e87b502c4d5ee40f5cf34a5ee5e7e3061d5
SSDEEP 3072:KxUBKbkUOwRmBXmn/98wv77pUgAQJG7BfQTBf/LooR:6Dglo98anKVQJ2BfQTBXLooR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4256

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

windowscodecs

WICMapSchemaToName WICMapShortNameToGuid WICMapGuidToShortName

msvcrt

localeconv strtod strchr strncpy _time64 malloc free memset memchr _strtoi64 _errno _snprintf _ftol2_sse _vsnwprintf memcpy atol qsort _vsnprintf

kernel32

SwitchToThread GetModuleHandleW GetProcAddress HeapCreate HeapFree HeapAlloc GetModuleHandleA lstrlenW MultiByteToWideChar lstrcatW WideCharToMultiByte LoadLibraryW FreeLibrary GetCommandLineW GetVersionExA GetSystemInfo GetCurrentDirectoryW GetWindowsDirectoryW lstrcmpiA GetSystemTimeAsFileTime FindFirstFileW FindNextFileW SetFileAttributesW GetExitCodeProcess LocalAlloc lstrcpynA FlushFileBuffers SetThreadPriority GetTickCount MoveFileW K32GetModuleFileNameExW lstrcmpA DisconnectNamedPipe GetProcessId GetCurrentThread DuplicateHandle CreateMutexW lstrcatA CreateDirectoryW GetLastError lstrcpynW GetDriveTypeW lstrcmpiW Sleep SetCurrentDirectoryA GetLocaleInfoA GetFileAttributesW GetCurrentProcessId LoadLibraryA

user32

RegisterClassExA UnregisterClassA CreateWindowExA DestroyWindow CharUpperBuffW CharUpperBuffA DefWindowProcW

gdi32

CreatePatternBrush GdiTransparentBlt CreateHalftonePalette CreateFontIndirectExW CreateEnhMetaFileA CreateScalableFontResourceA CreatePenIndirect CreateSolidBrush CreateEllipticRgn CreateDIBPatternBrush CreateDIBPatternBrushPt CreateRoundRectRgn CreateRectRgnIndirect CreateEllipticRgnIndirect CreateHatchBrush CreateBrushIndirect CreateBitmapIndirect GdiGetBatchLimit CreateDIBSection CreateFontA CreateScalableFontResourceW

advapi32

CreatePrivateObjectSecurity GetEventLogInformation AddAccessDeniedAce BuildTrusteeWithSidA AccessCheckByTypeAndAuditAlarmA AddAccessAllowedAceEx EnumerateTraceGuidsEx AccessCheckAndAuditAlarmA ChangeServiceConfig2A AddAccessAllowedAce EventWriteString EventActivityIdControl ConvertToAutoInheritPrivateObjectSecurity GetAce FindFirstFreeAce EventWrite EventWriteEx AddAuditAccessObjectAce EqualDomainSid EventWriteTransfer CloseTrace

shell32

CommandLineToArgvW

ole32

CoInitializeSecurity CoSetProxyBlanket CoInitializeEx CoCreateInstance

oleaut32

SafeArrayGetUBound VariantClear SafeArrayGetLBound SysFreeString SysAllocString SafeArrayGetElement SafeArrayDestroy