General

Malware Config

Signatures

Files

• 2dae838574c19aa327c16cd508436cad1be76dab57057fe7eec46711a474cb7e

  .dll regsvr32 windows x86

  4d9126ba3cc85d830eefe96867f669cf

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  winmm

  PlaySoundA

  shlwapi

  PathFileExistsA

  wininet

  DeleteUrlCacheEntry

  HttpQueryInfoA

  InternetCloseHandle

  InternetOpenUrlA

  InternetOpenA

  InternetReadFile

  FindCloseUrlCache

  FindNextUrlCacheEntryA

  FindFirstUrlCacheEntryA

  setupapi

  SetupIterateCabinetA

  kernel32

  SetLastError

  GetLastError

  GetProcAddress

  LoadLibraryA

  OutputDebugStringA

  LoadLibraryW

  GetModuleFileNameW

  GetModuleHandleA

  GetModuleHandleW

  lstrcpyA

  lstrcatA

  GetCurrentProcessId

  Sleep

  GlobalUnlock

  GlobalLock

  LeaveCriticalSection

  EnterCriticalSection

  lstrlenW

  TerminateThread

  DebugBreak

  GetVersion

  FindFirstFileA

  GetModuleFileNameA

  FreeLibrary

  GetTempFileNameA

  FlushInstructionCache

  GetCurrentProcess

  GetVersionExA

  lstrcmpA

  GetCurrentThreadId

  GetShortPathNameA

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  lstrcmpiA

  lstrcpynA

  IsDBCSLeadByte

  DisableThreadLibraryCalls

  InitializeCriticalSection

  HeapDestroy

  DeleteCriticalSection

  SetEndOfFile

  CompareStringA

  CompareStringW

  WideCharToMultiByte

  MultiByteToWideChar

  MoveFileExA

  GetTempPathA

  CreateFileA

  WriteFile

  CloseHandle

  InterlockedIncrement

  DeleteFileA

  RemoveDirectoryA

  lstrlenA

  InterlockedDecrement

  FindNextFileA

  FindClose

  GlobalAlloc

  ReadFile

  SetHandleCount

  LCMapStringA

  GetDriveTypeA

  UnhandledExceptionFilter

  IsBadWritePtr

  VirtualAlloc

  VirtualFree

  HeapCreate

  GetEnvironmentVariableA

  SetUnhandledExceptionFilter

  HeapSize

  TerminateProcess

  ExitProcess

  TlsGetValue

  TlsFree

  TlsAlloc

  GetCommandLineA

  HeapReAlloc

  HeapAlloc

  SetCurrentDirectoryA

  GetCurrentDirectoryA

  SetEnvironmentVariableA

  GetFullPathNameA

  GetLocalTime

  GetSystemTime

  GetTimeZoneInformation

  ExitThread

  TlsSetValue

  CreateThread

  ResumeThread

  CreateDirectoryA

  HeapFree

  RtlUnwind

  RaiseException

  LocalAlloc

  InterlockedExchange

  LocalFree

  LCMapStringW

  GetStringTypeW

  GetStringTypeA

  GetOEMCP

  GetACP

  GetCPInfo

  FlushFileBuffers

  SetStdHandle

  IsBadCodePtr

  IsBadReadPtr

  GetEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  SetFilePointer

  GetStartupInfoA

  GetFileType

  GetStdHandle

  user32

  SendMessageA

  wsprintfA

  UnhookWindowsHookEx

  GetParent

  CharLowerA

  SetCapture

  MessageBoxA

  CharNextA

  DefWindowProcA

  IsWindowVisible

  CloseClipboard

  GetClipboardData

  OpenClipboard

  GetSysColor

  SetWindowTextA

  GetSystemMetrics

  LoadCursorA

  RegisterWindowMessageA

  RegisterClassExA

  GetClassInfoExA

  GetWindow

  SetWindowLongA

  GetWindowTextA

  GetWindowTextLengthA

  GetWindowLongA

  DestroyCursor

  EnableMenuItem

  PostMessageA

  UnregisterClassA

  TranslateMessage

  DispatchMessageA

  MoveWindow

  GetWindowRect

  EmptyClipboard

  LoadCursorFromFileA

  CreateWindowExA

  GetDlgItem

  InvalidateRgn

  IsWindow

  ReleaseCapture

  DestroyAcceleratorTable

  CreateAcceleratorTableA

  GetDesktopWindow

  RedrawWindow

  SetWindowPos

  EndPaint

  IsChild

  CallWindowProcA

  GetDC

  ReleaseDC

  FillRect

  DrawEdge

  OffsetRect

  GetMenuItemInfoA

  CopyRect

  DestroyWindow

  SetFocus

  ShowWindow

  LoadMenuA

  GetSubMenu

  InsertMenuA

  MapWindowPoints

  LoadImageA

  GetMessagePos

  GetCursorPos

  GetFocus

  SetWindowsHookExA

  LoadStringA

  WindowFromPoint

  SetCursor

  ScreenToClient

  PtInRect

  GetKeyState

  GetClassNameA

  CallNextHookEx

  InvalidateRect

  wvsprintfA

  TrackPopupMenu

  SetTimer

  CreatePopupMenu

  AppendMenuA

  CheckMenuItem

  DestroyMenu

  KillTimer

  GetClientRect

  BeginPaint

  SetActiveWindow

  gdi32

  GetObjectA

  DeleteObject

  ExtTextOutA

  GetTextExtentPoint32A

  GetTextMetricsA

  SetTextColor

  SetBkColor

  SetBkMode

  SelectObject

  CreateBrushIndirect

  DeleteDC

  BitBlt

  CreateCompatibleDC

  CreateCompatibleBitmap

  CreateSolidBrush

  GetDeviceCaps

  GetStockObject

  GetTextExtentPointA

  CreateFontA

  advapi32

  RegEnumValueA

  RegQueryInfoKeyA

  RegEnumKeyExA

  RegDeleteKeyA

  RegDeleteValueA

  RegCloseKey

  RegSetValueExA

  RegOpenKeyExA

  RegCreateKeyExA

  RegQueryValueExA

  shell32

  SHAddToRecentDocs

  SHEmptyRecycleBinA

  ShellExecuteA

  ole32

  OleInitialize

  CLSIDFromProgID

  CoCreateInstance

  CoCreateGuid

  OleUninitialize

  CLSIDFromString

  CoUninitialize

  CoTaskMemFree

  StringFromCLSID

  CoTaskMemAlloc

  OleLockRunning

  RegisterDragDrop

  ReleaseStgMedium

  CoTaskMemRealloc

  OleRun

  CreateStreamOnHGlobal

  CoInitialize

  oleaut32

  SysAllocString

  VariantClear

  SysAllocStringByteLen

  SysFreeString

  LoadTypeLi

  SysStringByteLen

  VariantInit

  VariantChangeType

  VariantCopy

  SafeArrayDestroy

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  LoadRegTypeLi

  DispCallFunc

  OleCreateFontIndirect

  SafeArrayCreate

  VarUI4FromStr

  RegisterTypeLi

  GetErrorInfo

  SysAllocStringLen

  SysStringLen

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  TBStudioReg

  Sections

  .text

  Size: 340KB - Virtual size: 338KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 60KB - Virtual size: 56KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 33KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .SHARED

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 16KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 32KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ