Bqtloioqfk[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Bqtloioqfk.dll.exe
Size

527KB
MD5

f99144850b207c5ced4a836ed8dae5dd
SHA1

3991c67822f48abe205f656d1af3c615523a22df
SHA256

ede13e3fd313af456755cd4c702476918cbe5ea76b9aa527081d9d585b448ff7
SHA512

ed132b1b55f1a69fe5684652f1f76b79065fcb8d8573e965da39fe13020e915207c624d2e12446584ff9f90f5f5670843de187192ca135dd4e7d3a21a07a9828
SSDEEP

12288:cWzWEJzQvFoEcB9y3+KjCKo82/Ww5CGe90ra0x:FWE1QvFD+5KoL/Wwx2w5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bqtloioqfk.dll.exe

Files

Bqtloioqfk.dll.exe
.dll regsvr32 windows:6 windows x64

e84df41b2f503185a5597a36231acc88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
ReadFile
CloseHandle
GetProcessHeap
UnregisterApplicationRestart
GetSystemDefaultLangID
GetLargePageMinimum
GetCurrentProcess
TlsAlloc
GetEnvironmentStringsW
AreFileApisANSI
SetFileApisToOEM
GetSystemDefaultUILanguage
GetLogicalDrives
GetErrorMode
GetUserDefaultUILanguage
GetACP
GetCommandLineA
IsDebuggerPresent
GetCurrentThreadId
GetCurrentThread
GetThreadErrorMode
GetCommandLineW
GetOEMCP
VirtualAlloc
UnregisterApplicationRecoveryCallback
FlushProcessWriteBuffers
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
FindNextFileA
SizeofResource
FindResourceW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
FreeEnvironmentStringsW
IsValidCodePage
FindFirstFileExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
HeapAlloc
MultiByteToWideChar
GetTickCount64
SetStdHandle
WriteConsoleW
CreateFileW
RtlUnwind
LoadResource
HeapFree
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection

user32

GetMenuCheckMarkDimensions
GetMessageTime
GetMessageExtraInfo
InSendMessage
GetProcessWindowStation
GetCapture
CountClipboardFormats
IsWow64Message
CreateMenu
GetForegroundWindow
DestroyCaret
GetClipboardViewer
GetShellWindow
EmptyClipboard
AnyPopup
CharNextW
GetKBCodePage
IsProcessDPIAware
GetActiveWindow
GetOpenClipboardWindow
GetFocus

advapi32

RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

shell32

InitNetworkAddressControl

ole32

OleUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoFreeUnusedLibraries

oleaut32

VarUI4FromStr

Exports

Exports

DllMain
DllRegisterServer
DllUnregisterServer
EntryFunct
afucoyswzjuj
arxqjlllawbfjxia
bfuvjkk
bhwmpvinimt
bszmzocwbou
cjlsuvf
covclalyqatpl
djvnolytoc
edvqhrp
eekoibr
erffcasongxulprsb
esrqmsepixugculd
expyntxrywfotcjy
febycetpai
fhvhodgjevqptli
fnmogeiz
gslaapocrrwbuiwfs
gxczusmuylixquyr
hdzpucbxpvbakiyi
heizwnowb
hjzwepxhvtgmholug
hninigy
howbwmq
hrfwhqso
hrnodkorkok
hvwtgifcjkmnu
iahktupiy
icrkpddiejwydo
ielswpyfwvlt
ikewhtpe
indzcijdgzxqqxaxx
ipaufrgo
irmlmtgovyuy
iyodncxzszorgog
jazugykhkkp
jbxsmie
jdfhcejgzpldb
jevibhmnguxxrvmk
jfvifqswkyerqqkqm
jlgayrheesiqjc
jlmevio
jqmdnugpyfh
jquzchddsuqytc
knuyegtlccola
knyxkxyjtpwb
kojgpdemziuoxcw
lhxumocyjhqzq
lnnqtmp
lsnyippzeuv
lvkgdwzqfiwfalla
majulkdnl
mqrqblquuddrvfs
najubebvg
nbkfatauypy
nelpzncviosk
nnciixfqfzvrm
nrtwkyxqr
nvhjvfpjzporukon
nwtwvzagjy
nzciarszwxtsdtvt
nzxvyozdmrzbanlqt
oinhhyqbvwg
pdqpfpomwmvlerm
qhnmnyvpjfedt
qvdrppogjobwz
qvghfay
rljmzievvhzdi
rqdafjc
ryeepqvjzlbgfzxg
sgvwyptqtkkb
stypnmppwlbbrjgwi
swzaoujkofckrfidg
tbwqhgsyir
tegdyvh
tophmsxypbfchmaj
tqtxvkuomrysj
uavwoyzkhc
ukseuaooasnhsrxoo
umxutqrnbj
vdohnbqs
veotkjf
vgffeebrtxzaakd
vpsemvaiqcpa
wglfffxfea
wobbipqkwr
wpdybpxfe
wpipzptfyfj
wpjurezalmxrgswsl
wsbkynpnqtenbl
xdhtdirlhifr
xljqohsr
xrlzcgw
zazbrdoekfueuypzh
zcnqslvs
zgohxqjdy
znrmgtykpyltnvugj
zxiqicrsg
zxocjfqudgzb

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e84df41b2f503185a5597a36231acc88

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 135KB

.rdata Size: 77KB - Virtual size: 77KB

.data Size: 4KB - Virtual size: 10KB

.pdata Size: 7KB - Virtual size: 7KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 298KB - Virtual size: 298KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 135KB - Virtual size: 135KB

.rdata
Size: 77KB - Virtual size: 77KB

.data
Size: 4KB - Virtual size: 10KB

.pdata
Size: 7KB - Virtual size: 7KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 298KB - Virtual size: 298KB

.reloc
Size: 2KB - Virtual size: 2KB