c0aae05150c926c729adf13102ae7d36

Sharing

Copy URL Twitter E-mail

General

Target

c0aae05150c926c729adf13102ae7d36
Size

52KB
MD5

c0aae05150c926c729adf13102ae7d36
SHA1

568bea59d5615b3431d86c0988051edc3eeae30f
SHA256

78e3a9fabde0719d7958672a18584286f6d42f64be837540508a26da9ebe4d78
SHA512

6bcf8d84eab8f9ea8b9d24b63b1fb1c25d933178629bdf9d76569f7f91d6606623b38e400b726b21a671a3d96362c7b04d4edb0b1bbc8deb8730981dc8eb422c
SSDEEP

768:BNCjGHk4TKHWrKbs417XGXqGaBLs1li/GhFJY2aQTsfrsQ7nK5n5Jzn:BNCKHkArrKb/7X4qGed/G/pygQI5J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0aae05150c926c729adf13102ae7d36

Files

c0aae05150c926c729adf13102ae7d36
.dll windows:5 windows x86 arch:x86

026b6b9e153dae2d3a39286bc175614a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

ZwQueryOpenSubKeys
ZwQueryTimer
ZwCreateSemaphore
ZwQuerySystemEnvironmentValue
ZwClose
ZwCreateMutant

user32

RegisterClipboardFormatA
GetSystemMenu
SetParent
SystemParametersInfoA
SetWindowLongA
GetWindowPlacement
ShowWindow
OffsetRect
EnumThreadWindows
SendDlgItemMessageA

comctl32

ImageList_DragShowNolock

kernel32

GetStringTypeW
SetProcessAffinityMask
TlsAlloc
GetTimeZoneInformation
InterlockedIncrement
CreateThread
VirtualAlloc
LeaveCriticalSection
GetModuleHandleA
ExitProcess
GetUserDefaultLCID
GetVersion
CloseHandle
InterlockedIncrement
CloseHandle
GetFileAttributesA

gdi32

GetBkColor
GetTextColor

clbcatq

DowngradeAPL
GetComputerObject
ServerGetApplicationType
DllRegisterServer
GetCatalogObject2
DllUnregisterServer

ole32

RevokeDragDrop
RegisterDragDrop

advapi32

RegSetValueExA
RegCloseKey

Exports

Exports

CreateProcessNotify
GetOwnerModuleFromTcp6Entry
DllClientCleanup
logaPING
DllClientStartup
GetPerAdapterInfo
GetTcpStatisticsEx
GetInterfaceInfo
GetBestRoute
NhpAllocateAndGetInterfaceInfoFromStack
GetUdpStatistics
GetExtendedTcpTable
SetIpStatistics
InternalDeleteIpForwardEntry
CancelIPChangeNotify
InternalSetIpNetEntry
NotifyRouteChange
GetIpAddrTable
GetIcmpStatisticsEx
UnenableRouter
InternalSetIfEntry
SetIpForwardEntry
GetIpForwardTable
InternalGetUdpTable
GetAdaptersInfo
Icmp6CreateFile
GetTcpStatistics
GetIcmpStatistics
IcmpParseReplies
InternalGetTcpTable
IcmpCloseHandle
GetBestInterfaceEx
SetAdapterIpAddress
DisableMediaSense
Icmp6ParseReplies
GetBestInterface
InternalSetTcpEntry
NotifyAddrChange
IpReleaseAddress
do_echo_rep
GetOwnerModuleFromTcpEntry
GetNetworkParams
NTPTimeToNTFileTime
FlushIpNetTable
InternalGetIfTable
GetUniDirectionalAdapterInfo
IpRenewAddress
NhGetInterfaceNameFromDeviceGuid
GetIfTable
RestoreMediaSense
DeleteIpNetEntry
CreateProxyArpEntry
GetIpNetTable
SendARP
GetOwnerModuleFromUdp6Entry
InternalCreateIpForwardEntry
InternalDeleteIpNetEntry
DeleteIPAddress
GetFriendlyIfIndex
GetAdaptersAddresses
register_icmp
GetExtendedUdpTable
GetRTTAndHopCount
SetIpTTL
InternalGetIpForwardTable

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

026b6b9e153dae2d3a39286bc175614a

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

user32

comctl32

kernel32

gdi32

clbcatq

ole32

advapi32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB