67ac510d250e549bddb861f309ca4ae6b58797bd9f789ce20606d2aab55d6554

Sharing

Copy URL Twitter E-mail

General

Target

67ac510d250e549bddb861f309ca4ae6b58797bd9f789ce20606d2aab55d6554
Size

444KB
MD5

7cf8dd8bb3149847eae0346e7198403f
SHA1

13e6c826ed740c07cf9a94a2d0cfad65abd96ee2
SHA256

67ac510d250e549bddb861f309ca4ae6b58797bd9f789ce20606d2aab55d6554
SHA512

18f10758bb4c45e56c1dedb7dacb551de03d80ffeeeef5b3c74580aadba26f4c0e3c326530242057444c0c10062f41ee59f672eeb61636f1994924013af91680
SSDEEP

6144:yTADGB+OiCORTvlCtSoLlWLq0I27rsk03LeRpOXzYR74kypVrsEqbUL4:AkRLlCtSoZWLq0I27IkuLeRy2typBrc

Score

N/A

Malware Config

Signatures

Files

67ac510d250e549bddb861f309ca4ae6b58797bd9f789ce20606d2aab55d6554
.dll regsvr32 windows x86

7ca1d31e95a3e3ec4df0048c264240e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_unlock
_except_handler4_common
??1type_info@@UAE@XZ
_amsg_exit
_initterm
_XcptFilter
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
__dllonexit
_purecall
__CxxFrameHandler3
memcpy_s
memmove_s
_CxxThrowException
_wcsicmp
free
memset
strtod
atoi
malloc
_vsnwprintf
_lock
_onexit
realloc
_errno
atof
strncpy_s

kernel32

SetCommMask
InterlockedExchange
OutputDebugStringA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
SystemTimeToFileTime
GetSystemTime
CloseHandle
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
Sleep
GetOverlappedResult
WriteFile
ClearCommError
ReadFile
ResetEvent
SetCommState
GetCommState
GetProcessHeap
CreateFileA
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize

ole32

CoTaskMemFree
CoInitializeEx
CoUninitialize
CLSIDFromString
StringFromCLSID
PropVariantClear
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid

user32

UnregisterClassA

advapi32

TraceMessage
GetTraceEnableLevel
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
GetTraceEnableFlags
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle

propsys

InitPropVariantFromBuffer

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Microsoft_WDF_UMDF_Version

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7ca1d31e95a3e3ec4df0048c264240e0

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

ole32

user32

advapi32

propsys

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 1024B - Virtual size: 9KB

.rsrc Size: 292KB - Virtual size: 291KB

.reloc Size: 4KB - Virtual size: 4KB

.text Size: 102KB - Virtual size: 104KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 1024B - Virtual size: 9KB

.rsrc
Size: 292KB - Virtual size: 291KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 102KB - Virtual size: 104KB