e56bf15869f285f76f38bd9e890bf3f6a66eeaa35699e7049269a0af49e2e3b8

Sharing

Copy URL Twitter E-mail

General

Target

e56bf15869f285f76f38bd9e890bf3f6a66eeaa35699e7049269a0af49e2e3b8
Size

288KB
MD5

377c366ef387c76692f108566fd399e1
SHA1

c0d230418222eb3a813b2ac7061510b656b84d07
SHA256

e56bf15869f285f76f38bd9e890bf3f6a66eeaa35699e7049269a0af49e2e3b8
SHA512

d76acdb0bcedc23e8130997835c7e30e3b8fe14795a56c3ed397fd453a74f462b25a68f04fbc1013dd11c9cbdde9e1dea472660cccfa187c035e8b5077ebc09d
SSDEEP

6144:I0EUP7cScp5pxC2+vsZL2FL2UEzcZLnazJUqAFSOXGtNahem:PPkivsZK2cZDKd2em

Score

N/A

Malware Config

Signatures

Files

e56bf15869f285f76f38bd9e890bf3f6a66eeaa35699e7049269a0af49e2e3b8
.dll regsvr32 windows x86

4cb9ce2063ecd25d2efb8fec01626a3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA

shell32

ShellExecuteA

msvcr71

__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_resetstkoflw
malloc
_local_unwind2
_splitpath
realloc
strstr
_purecall
??_U@YAPAXI@Z
calloc
sprintf
_mbsrchr
__security_error_handler
memset
_strdup
_mbsicmp
_stat
_snprintf
_vsnprintf
getenv
_CxxThrowException
_except_handler3
??2@YAPAXI@Z
??_V@YAXPAX@Z
free
__CxxFrameHandler
??3@YAXPAX@Z
printf
wcslen

kernel32

GetSystemTimeAsFileTime
QueryPerformanceCounter
ExitProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
CreateProcessA
CreateEventA
CreateThread
SetEvent
GetCurrentProcessId
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
GetLongPathNameA
WriteConsoleA
GetStdHandle
AllocConsole
FreeLibrary
GetProcAddress
LoadLibraryA
WaitForSingleObject
GetTickCount
GetCurrentThreadId
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
TlsSetValue
TlsGetValue
lstrlenA
lstrlenW
TlsAlloc
TlsFree
GetModuleFileNameA
lstrcmpiA
InterlockedIncrement
InterlockedDecrement
LocalFree
FormatMessageA
GetShortPathNameA
GetModuleHandleA
CloseHandle
GetLastError
CreateFileA
MulDiv
SizeofResource
LoadResource
FindResourceA

user32

SetWindowRgn
OffsetRect
EqualRect
IntersectRect
EndPaint
IsWindowVisible
FillRect
EnumWindows
WaitMessage
PostThreadMessageA
DispatchMessageA
TranslateMessage
GetWindowThreadProcessId
BeginPaint
PeekMessageA
CallNextHookEx
GetPropA
IsWindow
GetParent
SetPropA
RemovePropA
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyState
InvalidateRect
CallWindowProcA
GetWindowLongA
ReleaseDC
UnionRect
PtInRect
DefWindowProcA
CreateWindowExA
RegisterClassExA
DestroyWindow
ShowWindow
GetFocus
SetFocus
UnregisterClassA
PostMessageA
GetForegroundWindow
SetWindowPos
ValidateRgn
LoadCursorA
wsprintfA
GetClassInfoExA
IsChild
GetDC
GetClientRect
SetWindowLongA
CharNextA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoCreateInstance
StringFromCLSID
CoTaskMemFree
OleRegGetMiscStatus

oleaut32

VarUI4FromStr
SysStringByteLen
OleCreatePropertyFrame
SysAllocStringByteLen
SysAllocStringLen
VarDecInt
VariantChangeType
VariantCopy
SysStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString

gdi32

SetBkColor
RestoreDC
DeleteDC
StretchDIBits
GetObjectType
CreateRectRgnIndirect
GetStockObject
CreateDCA
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
ExtTextOutA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_Java_sun_plugin2_main_server_IExplorerPlugin_allocateIDispatch@24
_Java_sun_plugin2_main_server_IExplorerPlugin_allocateIDispatchForJavaNameSpace@20
_Java_sun_plugin2_main_server_IExplorerPlugin_allocateVariantArray@12
_Java_sun_plugin2_main_server_IExplorerPlugin_fillInExceptionInfo0@28
_Java_sun_plugin2_main_server_IExplorerPlugin_freeVariantArray@20
_Java_sun_plugin2_main_server_IExplorerPlugin_getBrowserWindowHandle@16
_Java_sun_plugin2_main_server_IExplorerPlugin_getDocumentBase0@16
_Java_sun_plugin2_main_server_IExplorerPlugin_iDispatchExDeleteMember0@20
_Java_sun_plugin2_main_server_IExplorerPlugin_iDispatchInvoke0@52
_Java_sun_plugin2_main_server_IExplorerPlugin_iDispatchIsIHTMLWindow2@16
_Java_sun_plugin2_main_server_IExplorerPlugin_iUnknownAddRef@16
_Java_sun_plugin2_main_server_IExplorerPlugin_iUnknownRelease@16
_Java_sun_plugin2_main_server_IExplorerPlugin_iWebBrowser2Navigate@24
_Java_sun_plugin2_main_server_IExplorerPlugin_iWebBrowser2PutStatusText@20
_Java_sun_plugin2_main_server_IExplorerPlugin_invokeLater0@20
_Java_sun_plugin2_main_server_IExplorerPlugin_isBrowserWindowInForeground@16
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElementToScriptingObject@28
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElementToVoid@20
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JIB@24
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JIC@24
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JID@28
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JIF@24
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JII@24
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JIJ@28
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JILjava_lang_String_2@24
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JIS@24
_Java_sun_plugin2_main_server_IExplorerPlugin_setVariantArrayElement__JIZ@24
_Java_sun_plugin2_main_server_IExplorerPlugin_showDocument0@12
_Java_sun_plugin2_main_server_IExplorerPlugin_variantArrayElementToObject0@28
_Java_sun_plugin2_main_server_ServerPrintHelper_isPrinterDC0@16
_Java_sun_plugin2_main_server_ServerPrintHelper_printBand0@56
_Java_sun_plugin2_main_server_WindowsHelper_installModalFilterHook@20
_Java_sun_plugin2_main_server_WindowsHelper_installMouseHook@20
_Java_sun_plugin2_main_server_WindowsHelper_runMessagePump0@28
_Java_sun_plugin2_main_server_WindowsHelper_uninstallHook@24

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4cb9ce2063ecd25d2efb8fec01626a3e

Headers

File Characteristics

Imports

advapi32

shell32

msvcr71

kernel32

user32

ole32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 8KB - Virtual size: 5KB

.text Size: 188KB - Virtual size: 188KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 188KB - Virtual size: 188KB