General

Malware Config

Signatures

Files

• b4ec63c8ca0634f00d283b596ee0efcfa0d2b46662172bae5eb8632eda99325a

  .dll regsvr32 windows x64

  52987b0c9bc1f8d9cfa410ece3fade70

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  VirtualAlloc

  ExitProcess

  SetStdHandle

  WriteConsoleW

  LoadLibraryW

  IsValidLocale

  EnumSystemLocalesA

  GetLocaleInfoA

  GetUserDefaultLCID

  HeapReAlloc

  GetStringTypeW

  IsValidCodePage

  GetOEMCP

  GetACP

  CloseHandle

  SetFilePointer

  ReadFile

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  HeapSize

  GetLocaleInfoW

  GetModuleFileNameW

  EncodePointer

  DecodePointer

  Sleep

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  RaiseException

  RtlPcToFileHeader

  RtlLookupFunctionEntry

  RtlUnwindEx

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  GetLastError

  HeapFree

  WideCharToMultiByte

  LCMapStringW

  MultiByteToWideChar

  GetCPInfo

  HeapAlloc

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  FlsGetValue

  FlsFree

  SetLastError

  FlsAlloc

  GetProcAddress

  GetModuleHandleW

  SetHandleCount

  GetStdHandle

  InitializeCriticalSectionAndSpinCount

  GetFileType

  GetStartupInfoW

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  HeapSetInformation

  GetVersion

  HeapCreate

  HeapDestroy

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  WriteFile

  CreateFileW

  user32

  UpdateWindow

  ShowWindow

  CreateWindowExW

  LoadStringW

  LoadAcceleratorsW

  TranslateAcceleratorW

  TranslateMessage

  DispatchMessageW

  GetMessageW

  LoadIconW

  LoadCursorW

  RegisterClassExW

  DefWindowProcW

  DestroyWindow

  DialogBoxParamW

  BeginPaint

  EndPaint

  PostQuitMessage

  EndDialog

  ole32

  CoTaskMemAlloc

  CoLoadLibrary

  CoTaskMemFree

  Exports

  Exports

  DllRegisterServer

  P8KN6Ry3VDViGrYu4GbA8RiNq

  Sections

  .text

  Size: 88KB - Virtual size: 87KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 228KB - Virtual size: 228KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ