4a76a28498b7f391cdc2be73124b4225497232540247ca3662abd9ab2210be36

Sharing

Copy URL

Twitter E-mail

General

Target

4a76a28498b7f391cdc2be73124b4225497232540247ca3662abd9ab2210be36
Size

147KB
MD5

4a6ceabb2ce1b486398c254a5503b792
SHA1

08a1c43bd1c63bbea864133d2923755aa2f74440
SHA256

4a76a28498b7f391cdc2be73124b4225497232540247ca3662abd9ab2210be36
SHA512

a7266dbfee0689fe9386686a6f892055fffb15f5c11e77bf6591ded82a00b884da9b13ce5a7f29c827ae91018d9f7e71e2e6abb99050da3419154ae1edf77394
SSDEEP

3072:rHcvgjYsFth26h2F11uvFYGAdttuasSf3QHM5TTdfytylU2K:riloNovud4dtoabfyoS

Score

N/A

Malware Config

Signatures

Files

4a76a28498b7f391cdc2be73124b4225497232540247ca3662abd9ab2210be36
.dll regsvr32 windows x64

1a28f9c10c182809b4aa0f60d902631b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

ChangeWindowMessageFilter
CharLowerA
IsWindow
SendMessageA
DdeCmpStringHandles

msvfw32

GetOpenFileNamePreviewW
DrawDibTime
DrawDibRealize
DrawDibChangePalette
ICCompressorFree
ICLocate
ICInfo
ord2

kernel32

TerminateProcess
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetCurrentProcess
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize

Exports

Exports

DksPpBKuq
DllRegisterServer
IwSTv
LQyhsCdjl
NtEBMYyy
SQccDmJlhE
SRnbBm
UWVFLgF
VNwkYC
VosQlBrX
ZBCIRCy
hcecvo
hiNTcQnt
pSYvbyN
sJgsrZak
vVZzXAxKy
vYIhgy

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydos
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a28f9c10c182809b4aa0f60d902631b

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvfw32

kernel32

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 75KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 2KB - Virtual size: 6KB

.pdata Size: 3KB - Virtual size: 3KB

.ydos Size: 28KB - Virtual size: 28KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 75KB - Virtual size: 75KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 2KB - Virtual size: 6KB

.pdata
Size: 3KB - Virtual size: 3KB

.ydos
Size: 28KB - Virtual size: 28KB

.reloc
Size: 2KB - Virtual size: 1KB