General

Malware Config

Signatures

Files

• 8e2538a244ae726aeefdd4b6af84fe587d2a0070d5dfa8d27da73b2e74e89d65

  .dll regsvr32 windows x86

  ec6c53efbe6b648470367b1449ed542c

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CreateFileW

  SetFilePointer

  WriteFile

  InterlockedIncrement

  InterlockedDecrement

  FreeLibrary

  lstrcmpiW

  MultiByteToWideChar

  SizeofResource

  LoadResource

  FindResourceW

  LoadLibraryExW

  GetModuleHandleW

  DisableThreadLibraryCalls

  Sleep

  RaiseException

  GetLastError

  EnterCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  LeaveCriticalSection

  GetProcAddress

  LoadLibraryW

  CreateFileA

  SetEndOfFile

  CreateThread

  CloseHandle

  ResetEvent

  WaitForSingleObject

  OpenEventW

  LocalAlloc

  lstrlenW

  FormatMessageW

  GetModuleFileNameW

  LocalFree

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  ReadFile

  FlushFileBuffers

  SetStdHandle

  GetStringTypeW

  GetStringTypeA

  LoadLibraryA

  InterlockedExchange

  GetACP

  GetLocaleInfoA

  GetThreadLocale

  GetVersionExA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  HeapReAlloc

  HeapAlloc

  HeapFree

  VirtualProtect

  VirtualAlloc

  GetModuleHandleA

  GetSystemInfo

  VirtualQuery

  GetCurrentThreadId

  GetCommandLineA

  GetProcessHeap

  RtlUnwind

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  HeapSize

  ExitProcess

  HeapDestroy

  HeapCreate

  VirtualFree

  GetStdHandle

  GetModuleFileNameA

  GetCPInfo

  GetOEMCP

  LCMapStringA

  WideCharToMultiByte

  LCMapStringW

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  GetStartupInfoA

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetConsoleCP

  GetConsoleMode

  user32

  UnregisterClassA

  MessageBoxW

  CharNextW

  advapi32

  RegOpenKeyExW

  RegQueryInfoKeyW

  RegCloseKey

  RegDeleteKeyW

  RegDeleteValueW

  RegCreateKeyExW

  RegSetValueExW

  RegEnumKeyExW

  RegQueryValueExW

  ole32

  CoTaskMemRealloc

  CoTaskMemAlloc

  StringFromGUID2

  CoCreateInstance

  CoTaskMemFree

  oleaut32

  SysAllocString

  LoadTypeLi

  LoadRegTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  SysStringLen

  VariantChangeType

  VariantClear

  VariantInit

  SysFreeString

  shlwapi

  StrToIntW

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 144KB - Virtual size: 142KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 44KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ