107f917a5ddb4d3947233fbc9d47ddc8[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

107f917a5ddb4d3947233fbc9d47ddc8.bin
Size

298KB
MD5

107f917a5ddb4d3947233fbc9d47ddc8
SHA1

75c516dde8415494c288e349d440ce778dede8e3
SHA256

2d41b04f5d86047dc2353a10595418b0d5239c22112f36eb9d253b2e8b6eb0d0
SHA512

5593e817b525ce5957b1506f983d3acf193a981223a4d606a2d5731dc9acf92d2d7fef90cb46fc470ae66217da872b5266043cf093d65d03145cca1255d42870
SSDEEP

6144:S1/hfe3XMMljfCxXrCyTVoPktbBXohfy1i:Slc3djq9CMo0Fo9

Score

1^/10

Malware Config

Signatures

Files

107f917a5ddb4d3947233fbc9d47ddc8.bin
.dll regsvr32 windows x64

5823b606db0c178355b782d0d4696b67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

InitializeCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
LoadLibraryW
DecodePointer
GetProcAddress
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetSystemDirectoryW
LocalAlloc
LeaveCriticalSection
CloseHandle
SetLastError
LoadLibraryA
IsBadReadPtr
WriteConsoleW
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
EnterCriticalSection
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
IsDebuggerPresent
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
GetCommandLineA
GetCommandLineW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
RtlUnwind

advapi32

GetTokenInformation

Exports

Exports

DllInstall
DllRegisterServer

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5823b606db0c178355b782d0d4696b67

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 186KB - Virtual size: 186KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 5KB - Virtual size: 51KB

.pdata Size: 9KB - Virtual size: 9KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 186KB - Virtual size: 186KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 5KB - Virtual size: 51KB

.pdata
Size: 9KB - Virtual size: 9KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB