General

Malware Config

Signatures

Files

• kxFFt5.dll

  .dll regsvr32 windows x64

  b60d18971f329cb5243e0198109a3914

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  shlwapi

  StrChrW

  StrStrA

  StrToInt64ExA

  StrToInt64ExW

  StrChrA

  ole32

  CoGetContextToken

  CoGetStandardMarshal

  PropVariantClear

  SNB_UserMarshal

  StgIsStorageFile

  StgOpenStorageEx

  OleQueryLinkFromData

  OleNoteObjectVisible

  Exports

  Exports

  BLawoX

  DQeCfWsaaS

  DllRegisterServer

  FLzChEzQ

  MTxVfU

  MzEcZXbzdF

  SAKGfztl

  SwFJJKLNqq

  asbbCg

  cwZAbFv

  exkDsP

  ggQKgzIr

  jzbTYAi

  phTqcsNgtrP

  rfWHGX

  tmbGVMHZIy

  zDnFFlqDtA

  zNMGUb

  zQYMUrW

  Sections

  .text

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 690KB - Virtual size: 689KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE