c0609eaf8c7db0ab577d531ca68919ceac8feb095137a2d8c9d00457c163d969

Sharing

Copy URL Twitter E-mail

General

Target

c0609eaf8c7db0ab577d531ca68919ceac8feb095137a2d8c9d00457c163d969
Size

244KB
MD5

4ca8168e7eb57a6e87b282d08762f080
SHA1

51262b189f98f6415b4a31f555824aba83e7a4b8
SHA256

c0609eaf8c7db0ab577d531ca68919ceac8feb095137a2d8c9d00457c163d969
SHA512

9aa76ee609a461fe56b342fa0787f651b05cbab225edba49c1a4759d93f4821b1b4df87a0b2c20c16f0ed0b82bb0c6c26e8726c4ac405171c92ff5f1676d340d
SSDEEP

3072:4NHHnBntNwlLHqjZqMNRq4fEBm9hgkU4SbSC975VuAxZGLyOImy5EltC0D:4JHp4lLHmv3EB6xlSbVQAxZXOIEj

Score

N/A

Malware Config

Signatures

Files

c0609eaf8c7db0ab577d531ca68919ceac8feb095137a2d8c9d00457c163d969
.dll regsvr32 windows x86

cbb2448265c8ccc4de2bf9154a176437

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA

gdi32

GetStockObject

shell32

Shell_NotifyIconA

kernel32

ExitProcess
QueryPerformanceCounter
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
LocalFree
lstrcpyA
lstrcpynA
lstrlenA
WinExec
GetModuleFileNameA
SetEvent
CloseHandle
WaitForSingleObject
CreateThread
ResetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
GetProcAddress
SetEnvironmentVariableA
lstrcatA
WriteConsoleA
GetStdHandle
FreeLibrary
FreeConsole
LoadLibraryA
GetModuleHandleA
FindClose
FindFirstFileA
GetWindowsDirectoryA
GlobalMemoryStatus
lstrcmpA
AllocConsole
MultiByteToWideChar
GetShortPathNameA
lstrcmpiA
WideCharToMultiByte
CreateFileA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetLastError
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
IsDBCSLeadByte
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId

user32

GetWindowRect
FindWindowExA
LoadStringA
LoadImageA
PostMessageA
CharNextA
RegisterClassA
CreateWindowExA
ShowWindow
SetWindowLongA
GetMessageA
TranslateMessage
DispatchMessageA
GetWindowLongA
MessageBoxA
DefWindowProcA
PostQuitMessage
DestroyWindow
wsprintfA
CreatePopupMenu
AppendMenuA
SetMenuItemInfoA
GetCursorPos
SetForegroundWindow
TrackPopupMenu

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
OleRun

oleaut32

VarUI4FromStr
VariantClear
VariantInit
SysAllocString
GetErrorInfo

msvcr71

strtok
strchr
strncmp
memmove
__security_error_handler
__CppXcptFilter
malloc
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
memset
getenv
_stricmp
_local_unwind2
_resetstkoflw
fopen
fclose
fgetc
wcslen
??_U@YAPAXI@Z
sprintf
strstr
strtol
strncat
strrchr
_stat
vsprintf
realloc
perror
exit
_CxxThrowException
??2@YAPAXI@Z
_except_handler3
free
??3@YAXPAX@Z
??_V@YAXPAX@Z
__CxxFrameHandler
_purecall

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cbb2448265c8ccc4de2bf9154a176437

Headers

File Characteristics

Imports

advapi32

gdi32

shell32

kernel32

user32

ole32

oleaut32

msvcr71

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 20KB

.rsrc Size: 56KB - Virtual size: 52KB

.reloc Size: 8KB - Virtual size: 4KB

.text Size: 120KB - Virtual size: 120KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 20KB

.rsrc
Size: 56KB - Virtual size: 52KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 120KB - Virtual size: 120KB