f3711b770d1b6bc9efd96855bd21924904a693c03247f6be5a02adfab073e36e

Sharing

Copy URL Twitter E-mail

General

Target

f3711b770d1b6bc9efd96855bd21924904a693c03247f6be5a02adfab073e36e
Size

332KB
MD5

43bb80395457efaf50e59e3a01f51b50
SHA1

093e173069b55e7eecddd9a91385178f0aad61c4
SHA256

f3711b770d1b6bc9efd96855bd21924904a693c03247f6be5a02adfab073e36e
SHA512

cdcf2063b4282bebf65445ad942965f8857d47a402d557bbbf5c4eeb51def8894bdd7284ee4080ac6abd1ac3c361b60b4984c966fea3f25f2efc4c95fb4aeec7
SSDEEP

6144:V7KfklWMUpnTlTnAZGGixpqJ0YLTBCGFAPzUS3CiTVjo6F:VuWqnTlTnAwRpW0YLT0dPzUuCiTNr

Score

N/A

Malware Config

Signatures

Files

f3711b770d1b6bc9efd96855bd21924904a693c03247f6be5a02adfab073e36e
.dll regsvr32 windows x86

e34da34fc7bb42a0ed5c21c113a0d4b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
HeapFree
HeapAlloc
GetFileAttributesExW
GetProcAddress
GetLastError
GetModuleFileNameW
GetVersionExW
GetModuleHandleW
GetCurrentProcess
InterlockedDecrement
GetProcessHeap
InterlockedIncrement
InterlockedCompareExchange
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
InterlockedExchange
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetLocaleInfoW
GetStdHandle
WriteFile
ExitProcess
HeapSize
Sleep
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
InitializeCriticalSection
GetCurrentThreadId
RtlUnwind
DecodePointer
EncodePointer

gdi32

CreateDIBSection

advapi32

RegDeleteValueW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
ConvertSidToStringSidW
LookupAccountNameW
RegSetValueExW

shell32

SHChangeNotify

ole32

CoInitialize
CoUninitialize
CoCreateInstance

avcodec-ics-55

av_packet_new_side_data
av_packet_get_side_data
avpicture_get_size
avcodec_find_decoder
av_init_packet
av_copy_packet
avcodec_decode_video2
avcodec_flush_buffers
av_free_packet
avpicture_fill
avcodec_open2
av_packet_split_side_data
avcodec_close
av_new_packet

avformat-ics-55

av_register_all
av_get_packet
av_set_pts_info
ff_codec_bmp_tags
av_add_index_entry
ff_update_cur_dts
avio_size
ff_codec_get_id
av_find_input_format
avio_r8
avformat_new_stream
avio_seek
ff_codec_movvideo_tags
avio_alloc_context
av_register_input_format
av_seek_frame
avformat_open_input
avformat_close_input
avformat_find_stream_info
avformat_alloc_context
av_read_frame
avio_read

avutil-ics-52

av_mallocz
av_freep
av_malloc
av_frame_alloc
av_rescale
av_dict_get
av_frame_free
av_cpu_count
av_frame_unref
av_log_set_level
av_d2q
av_realloc
av_free
av_reduce

swscale-ics-2

sws_scale
sws_freeContext
sws_getCachedContext

shlwapi

SHDeleteKeyW
ord219
SHCopyKeyW
SHCreateStreamOnFileEx
ord12

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

windowscodecs

WICConvertBitmapSource

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e34da34fc7bb42a0ed5c21c113a0d4b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

shell32

ole32

avcodec-ics-55

avformat-ics-55

avutil-ics-52

swscale-ics-2

shlwapi

wtsapi32

windowscodecs

Exports

Exports

Sections

.text Size: 178KB - Virtual size: 177KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 6KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 10KB - Virtual size: 10KB

.text Size: 90KB - Virtual size: 92KB

.text
Size: 178KB - Virtual size: 177KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 6KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 10KB - Virtual size: 10KB

.text
Size: 90KB - Virtual size: 92KB