DllRegisterServer
Static task
static1
General
-
Target
2a60fb9d9ef4a26bb39edd4c701b9cd7d0b76962326458828c4d00f7fb6e9384
-
Size
733KB
-
MD5
fd24dece96cd6fa175ca50ac8c8fea7c
-
SHA1
81fcfad67b3c922607b7c50f410b5b2d3ed2e997
-
SHA256
2a60fb9d9ef4a26bb39edd4c701b9cd7d0b76962326458828c4d00f7fb6e9384
-
SHA512
e59cb2d9d6f018231afc8faccc11441bf589ded7589a44fcd2f62aa82ba8742d873772aca661d29be01bf3eb81f574cbd404bbe28d9c0becd5d47395c9fe829a
-
SSDEEP
12288:QolWKutgeC7t1DtuANCqKLvr+U4rG2a/FviAzPVC5Go3DHeFP8ge/wgS0yXD:QolJutInCqWB5ztqL6x
Malware Config
Signatures
Files
-
2a60fb9d9ef4a26bb39edd4c701b9cd7d0b76962326458828c4d00f7fb6e9384.dll regsvr32 windows x64
311fcea8519089f91be16d46a87cbd88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
SetStdHandle
WriteConsoleW
LoadLibraryW
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CloseHandle
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetCPInfo
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
CreateFileW
user32
MessageBoxA
ShowWindow
ole32
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoInitialize
oleaut32
SysFreeString
Exports
Exports
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 525KB - Virtual size: 525KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ