768c84100d6e3181a26fa50261129287[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

768c84100d6e3181a26fa50261129287.bin
Size

155KB
MD5

768c84100d6e3181a26fa50261129287
SHA1

6f4b6938ac8fd9591fc399219dbaf4347d8b444b
SHA256

780e7edbfad5f68051c2039036b00b304d3f828fdbee85d2d09edbcc6d07ea34
SHA512

167e952a5173f35e946e281e605a61125acfe354a6b77106e64816995b2f7edc13e957c6a5a1d1c84f38281358749dcc0cb2b18524697cecff110998f1599bc6
SSDEEP

3072:9za6KJzfr6F8y0uZTygtWJY8oo4z9HjAOyZgszaXTJ37UA3ySuFF8Z84EnPkOTMb:9za6KBf2iy9Y9Y9DAxrIT1D3/uFFBtLq

Score

1^/10

Malware Config

Signatures

Files

768c84100d6e3181a26fa50261129287.bin
.dll regsvr32 windows x86

181f82b91be9c354995dd9ebd06e74b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
LoadLibraryW
DecodePointer
GetProcAddress
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
WriteFile
LocalAlloc
CreateFileW
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCommandLineA
GetCommandLineW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
WriteConsoleW

Exports

Exports

DllInstall
DllRegisterServer

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

181f82b91be9c354995dd9ebd06e74b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 3KB - Virtual size: 33KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 3KB - Virtual size: 33KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 5KB