1be8e3bdc208768428d6c070e8bfdce7a2d3321f4e770cd644d165869172af2b

Sharing

Copy URL Twitter E-mail

General

Target

1be8e3bdc208768428d6c070e8bfdce7a2d3321f4e770cd644d165869172af2b
Size

221KB
MD5

54af03ddbf5964838e6899f9cc6c7830
SHA1

ffe10b0682b03efd3eb5083e4ccd97c50bc6d942
SHA256

1be8e3bdc208768428d6c070e8bfdce7a2d3321f4e770cd644d165869172af2b
SHA512

22f944f09e4532e2615a6b8e32151782ecb6df90c8a0239b067ebda872e2989ac83b42d77b671e4f5baa85e6dd51c698eb5d3e9ccb5847581c9ba4ae6136d5a5
SSDEEP

6144:iZM9aBySCK8ea35JFWTmyFxc9yj0kQ0LcxxQ17E5:h9aBUeGFWSyFW9aHQ0QxQ25

Score

N/A

Malware Config

Signatures

Files

1be8e3bdc208768428d6c070e8bfdce7a2d3321f4e770cd644d165869172af2b
.dll regsvr32 windows x86

e287cd4d649cc7f6f83e760acad29d8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

kernel32

CloseHandle
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
WriteFile
Sleep
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
CreateFileA
LoadLibraryA
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetModuleHandleA
GetProcAddress
InterlockedIncrement
InterlockedDecrement
DeviceIoControl
GlobalFree
GlobalHandle
ReleaseMutex
WaitForSingleObject
GlobalLock
GlobalAlloc
CreateThread
CreateMutexA
GetExitCodeThread
lstrlenA
HeapSize
GetCurrentProcess
HeapCreate
HeapDestroy

user32

MessageBoxA

ole32

CoTaskMemFree
StringFromCLSID

advapi32

RegOpenKeyA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e287cd4d649cc7f6f83e760acad29d8c

Headers

File Characteristics

Imports

ntdll

kernel32

user32

ole32

advapi32

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 61KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text Size: 151KB - Virtual size: 152KB

.text
Size: 61KB - Virtual size: 61KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 151KB - Virtual size: 152KB