a8f8cbdfdcaec41b150fc81cffc91463d33b24c3b71bf01732de0954a1030f49

Sharing

Copy URL Twitter E-mail

General

Target

a8f8cbdfdcaec41b150fc81cffc91463d33b24c3b71bf01732de0954a1030f49
Size

1.2MB
MD5

50058de72387e006f3f888c779e781df
SHA1

977050fcb92a3f1dadb9f2aa537754f82b0798f1
SHA256

a8f8cbdfdcaec41b150fc81cffc91463d33b24c3b71bf01732de0954a1030f49
SHA512

386951abb0a9685352ba54a642ac67ede76a54cebf1e8b3c212eb69ca57840f06d7974270ec2564fdd19da15dc81fb7f48d687bc5147b74139f0b995c0cc0602
SSDEEP

24576:BVjHzrxw66NplApqYZZ0B6/GZe6mxSfPdGZIgmwHyACDFCCzIRpHo5PnsJ0ZxVnk:vjHzWapBP0BPVwarOkzmnnQH6

Score

N/A

Malware Config

Signatures

Files

a8f8cbdfdcaec41b150fc81cffc91463d33b24c3b71bf01732de0954a1030f49
.dll regsvr32 windows x86

cf5d24305d00f8ce88de33d197ef42da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StringFromCLSID
CLSIDFromProgID
CreateStreamOnHGlobal
CreateBindCtx
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoCreateInstance

shlwapi

ord44
ord45
ord311
ord310
StrCpyW
StrCatW
PathIsURLW
PathSearchAndQualifyW
UrlCreateFromPathW
UrlUnescapeW
PathCreateFromUrlW
PathIsRelativeW
UrlGetLocationW
UrlCanonicalizeW
ord52
UrlIsW
ord66
StrToIntW
StrCmpNIW
StrCmpNW
StrCmpW
ord115

kernel32

GetExitCodeThread
LocalAlloc
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
DebugBreak
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcmpA
MultiByteToWideChar
ExpandEnvironmentStringsA
TlsGetValue
lstrcpyA
GetModuleFileNameA
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
HeapFree
HeapSize
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
GetProcessHeap
TlsSetValue
CloseHandle
GetCurrentThreadId
DuplicateHandle
GetCurrentThread
GetCurrentProcess
GetModuleHandleA
GetVersionExA
TlsAlloc
TlsFree
InitializeCriticalSection
WaitForSingleObject
GetTickCount
ReleaseSemaphore
InterlockedExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreA
CreateEventA
Sleep
VirtualQuery
GetThreadContext
ResumeThread
SuspendThread
SetEvent
ResetEvent
HeapDestroy
GetLastError
HeapCreate
GetSystemInfo
SetLastError
RaiseException
WideCharToMultiByte
LoadResource
FormatMessageA
FormatMessageW
LoadLibraryExA
FileTimeToSystemTime
SystemTimeToFileTime
WriteFile
SetFilePointer
GetFileType
FlushFileBuffers
ReadFile
SetEndOfFile
GetThreadLocale
GetTimeFormatW
GetDateFormatW
GetModuleHandleW
GetCPInfo
GetCommandLineA
VirtualProtect
RtlUnwind
ExitProcess
SetHandleCount

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 981KB - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf5d24305d00f8ce88de33d197ef42da

Headers

File Characteristics

Imports

ole32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 981KB - Virtual size: 981KB

.data Size: 126KB - Virtual size: 127KB

.rsrc Size: 108KB - Virtual size: 107KB

.reloc Size: 59KB - Virtual size: 59KB

.text
Size: 981KB - Virtual size: 981KB

.data
Size: 126KB - Virtual size: 127KB

.rsrc
Size: 108KB - Virtual size: 107KB

.reloc
Size: 59KB - Virtual size: 59KB