0bfb4da03f6760ea9b24ee8e2b101ceee93fbfb3e9f3be1ecd55645690103df9

Sharing

Copy URL

Twitter E-mail

General

Target

0bfb4da03f6760ea9b24ee8e2b101ceee93fbfb3e9f3be1ecd55645690103df9
Size

128KB
MD5

342fb27ff4831b3a7000170fea897a66
SHA1

4adc0ba6dac2937af6eccbca257cfdbe25cf1961
SHA256

0bfb4da03f6760ea9b24ee8e2b101ceee93fbfb3e9f3be1ecd55645690103df9
SHA512

ca7cd8712e716ef8bcb5dd11e7065041f5a3fbd97318997f423755a1253c1b0e081ea1b5027c819fa18eab53d86c034672ea716c1d8921c759c7245d6ffb7a27
SSDEEP

3072:OdEdnvOjI0evGkPTFEUuEU78WG0RO9uQoFEw/7rG9KVuaduMyZFzLr2n5lhRTY1:D0ROQYSyfj25HR+

Score

N/A

Malware Config

Signatures

Files

0bfb4da03f6760ea9b24ee8e2b101ceee93fbfb3e9f3be1ecd55645690103df9
.dll regsvr32 windows x86

f9c640b3e31cfc22f76fdad7884caf61

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
GetModuleFileNameA
MultiByteToWideChar
GetVersionExA
DisableThreadLibraryCalls
GetLastError
InterlockedIncrement
InterlockedDecrement
CloseHandle
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
FreeLibrary
lstrlenA

user32

SetRectEmpty
CopyRect
IsRectEmpty
DestroyIcon
IsWindow
GetPropA
RemovePropA
DestroyWindow
IntersectRect
EqualRect
SetRect
wsprintfA
SetWindowLongA

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegOpenKeyExA
RegQueryValueExA

ole32

CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

msvcrt

_adjust_fdiv
_initterm
_except_handler3
_purecall
free
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9c640b3e31cfc22f76fdad7884caf61

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB