025660c20f72d415779ca2edab2985ef7ed01b3d10f134edb7869d02e970fc63

Sharing

Copy URL Twitter E-mail

General

Target

025660c20f72d415779ca2edab2985ef7ed01b3d10f134edb7869d02e970fc63
Size

75KB
MD5

43eb712deb0d5619571f0abeb943ae3d
SHA1

26b60bbc70dc497fc638eaae01bcd62eeeaf336a
SHA256

025660c20f72d415779ca2edab2985ef7ed01b3d10f134edb7869d02e970fc63
SHA512

002a9192ad92d90efeda02bae48aa6ebce92c31120985f5a045c4efcb2797b7b75a382b2a30e83f393b25f69430d8d2f55803086b10803199957e1a6e34cc8e2
SSDEEP

384:o79jUmwAYrrGNV5MjK9hd3xb5KEAv3WUhe106emRFNJ0QjN:o79wbAxrMkLHKPvGbGmn0CN

Score

N/A

Malware Config

Signatures

Files

025660c20f72d415779ca2edab2985ef7ed01b3d10f134edb7869d02e970fc63
.dll regsvr32 windows x86

21a95bc960fa773c483f3c02e53ac558

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
ResetEvent
CloseHandle
CompareStringA
CreateToolhelp32Snapshot
lstrcatA
GetVersion
lstrcpyA
TerminateProcess
GetFileAttributesW
GetProcAddress
GetModuleHandleW
Process32First
GetModuleFileNameA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
lstrcpyW
PulseEvent
GetProcessHeap
OpenProcess
GetModuleHandleA
lstrlenA
lstrcmpA
HeapAlloc
HeapFree
RtlUnwind

user32

DestroyWindow
ShowWindow
IsWindow
CallWindowProcA
EndPaint
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
GetWindowLongA
SetWindowLongA
CreateWindowExA
UnregisterClassA
RegisterClassA
wsprintfW
LoadBitmapA
BeginPaint

gdi32

CreateCompatibleDC
SelectObject
DeleteDC
CreateFontA
DeleteObject

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString

msimg32

TransparentBlt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21a95bc960fa773c483f3c02e53ac558

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msimg32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 688B

.rsrc Size: 53KB - Virtual size: 52KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 688B

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 2KB - Virtual size: 2KB