e9205cd9f9bccaa62e001c64d23670c74b8ab8430d545295b9e45c47e688cadb

Sharing

Copy URL Twitter E-mail

General

Target

e9205cd9f9bccaa62e001c64d23670c74b8ab8430d545295b9e45c47e688cadb
Size

621KB
MD5

6270053e8d9c5ae61e65cb78feeaaa4b
SHA1

7d4a3a5edb5aa2e448918610fce7435e84582dde
SHA256

e9205cd9f9bccaa62e001c64d23670c74b8ab8430d545295b9e45c47e688cadb
SHA512

c394ed8fc4d2db1fe0f08d82ad0986ecd2c133147f27b174f6a1ebc6c3357d3d632cd577e05c88ae12428d37b60e9320360f04339975c57a2c60e0ced53c82e5
SSDEEP

12288:E7Mgq2hNXmgv6SlbnK1GMAKMsAXkD5++re/GtN:EAr2hxkNAKMsA0J/

Score

N/A

Malware Config

Signatures

Files

e9205cd9f9bccaa62e001c64d23670c74b8ab8430d545295b9e45c47e688cadb
.dll regsvr32 windows x86

08ab0dda04fe8b886a6218187b91a780

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantClear
CoInitializeEx
CoCreateGuid
CoInitializeSecurity
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

SysStringLen
SysAllocString
LoadTypeLi
VarDateFromUdate
VariantTimeToSystemTime
SystemTimeToVariantTime
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysFreeString

user32

UnregisterClassA
CharNextW

kernel32

SetWaitableTimer
WaitForSingleObject
CloseHandle
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
GetVersionExA
WideCharToMultiByte
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
VirtualProtect
VirtualAlloc
GetProcAddress
GetSystemInfo
VirtualQuery
GetModuleHandleA
ExitProcess
CreateThread
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
OutputDebugStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
Sleep
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateWaitableTimerW
CancelWaitableTimer
ResetEvent
SetEvent
CreateEventW
LockResource
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
WaitForMultipleObjects
ExitThread
CreateEventA
OpenEventA
TlsGetValue

advapi32

RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
TraceMessage
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Microsoft_WDF_UMDF_Version

Sections

.text
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

08ab0dda04fe8b886a6218187b91a780

Headers

DLL Characteristics

File Characteristics

Imports

ole32

oleaut32

user32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 361KB - Virtual size: 361KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 154KB - Virtual size: 153KB

.reloc Size: 30KB - Virtual size: 29KB

.text Size: 62KB - Virtual size: 64KB

.text
Size: 361KB - Virtual size: 361KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 154KB - Virtual size: 153KB

.reloc
Size: 30KB - Virtual size: 29KB

.text
Size: 62KB - Virtual size: 64KB