08ecc70978defbe45ef1cc45aae6a9172e28dee52fbe5939606ca47a4ffc52f5

General

Target

08ecc70978defbe45ef1cc45aae6a9172e28dee52fbe5939606ca47a4ffc52f5
Size

377KB
MD5

6f935cbdde0e200b515b6ac8f1d966fb
SHA1

9053b7516fb5d585c7850d47ccc983fc275d573d
SHA256

08ecc70978defbe45ef1cc45aae6a9172e28dee52fbe5939606ca47a4ffc52f5
SHA512

7ec5a9175bffac6dd8581fb255db90f5c1479041ff4280221c3f46caec74ac2f110b72ebebdb61d5185b41a4aa143578c23e54f5122b8147a9e8253504d8890e
SSDEEP

6144:vvrvrPk4UUnlTTkz/yDj9yf1QoY4kOFYQJFT+dW:DrldlTTG/yn0dZYJk+d

Score

N/A

Malware Config

Signatures

Files

08ecc70978defbe45ef1cc45aae6a9172e28dee52fbe5939606ca47a4ffc52f5
.dll regsvr32 windows x86

9bf0dc836e86e89ab6c940837038caf1

Code Sign

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kbdgr

KbdLayerDescriptor

kernel32

QueryPerformanceCounter
HeapCreate
FormatMessageW
IsProcessorFeaturePresent
GetFileSizeEx
LoadResource
InitializeCriticalSection
GetCurrentThreadId
HeapAlloc
UnhandledExceptionFilter
GetProcessHeap
HeapReAlloc
HeapSize
InitializeSListHead
MultiByteToWideChar
LeaveCriticalSection
GetCurrentProcess
GetCurrentProcessId
SizeofResource
EnterCriticalSection
CloseHandle
GetLastError
LocalFree
RaiseException
CreateFileW
VirtualProtectEx
ReadFile
FindResourceExW
HeapDestroy
SetUnhandledExceptionFilter
LockResource
SetLastError
LocalAlloc
IsDebuggerPresent
TerminateProcess
DeleteCriticalSection
HeapFree

ole32

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoCreateGuid
CLSIDFromString
StringFromGUID2
CoTaskMemFree

user32

wsprintfW
UnregisterClassA

Exports

Exports

DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bf0dc836e86e89ab6c940837038caf1

Code Sign

Headers

File Characteristics

Imports

kbdgr

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 110KB - Virtual size: 157KB

.rsrc Size: 135KB - Virtual size: 135KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 110KB - Virtual size: 157KB

.rsrc
Size: 135KB - Virtual size: 135KB

.reloc
Size: 9KB - Virtual size: 8KB