f53a6172429a35ba9624cade458c61ab114c6ad64fea8892cdcd2be381294cb0

Sharing

Copy URL Twitter E-mail

General

Target

f53a6172429a35ba9624cade458c61ab114c6ad64fea8892cdcd2be381294cb0
Size

26KB
MD5

917621f57758cb35da64dd0331a24760
SHA1

14d0ab9e40801eebc6644dffb06e6fcd218715ac
SHA256

f53a6172429a35ba9624cade458c61ab114c6ad64fea8892cdcd2be381294cb0
SHA512

3228a71e718b9055cb0413105e6c5a8f185d2c9d60d123a52b1ef518405488aa3b9d1b290e9eb4d4b59ad3234c840472795d507d79dff968ad2c0487b6af89d4
SSDEEP

768:ywYpPOJkKBjBS0Sbr5XQjbw6Hq076wIFmK+4QjfYLxX+:yb1OKKNBSlb2bA07BIFm

Score

N/A

Malware Config

Signatures

Files

f53a6172429a35ba9624cade458c61ab114c6ad64fea8892cdcd2be381294cb0
.dll regsvr32 windows x86

f6e8080344c216417631da09d43cc4a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
GetSystemDefaultLangID
SetLastError
GetCurrentDirectoryW
GetUserDefaultLCID
SystemTimeToFileTime
IsDBCSLeadByte
TerminateThread
GetSystemTime
InterlockedExchange
DuplicateHandle
InterlockedCompareExchange
lstrlenW
FindNextFileW
GetFullPathNameW
GlobalMemoryStatus
HeapAlloc
GetProcessHeap
VirtualAlloc
LocalFree
CreateDirectoryW
LCMapStringW
SetFilePointer
GetModuleHandleW
ReleaseSemaphore
IsBadWritePtr
UnlockFile
ExitThread
GetModuleFileNameW
ExitProcess
lstrcatW
GetCommandLineW
Sleep

ole32

CoTaskMemRealloc
CoUninitialize

user32

FillRect
KillTimer
DefWindowProcW
BeginPaint
WindowFromPoint
MapWindowPoints
CharNextW
GetParent
SetFocus
RegisterWindowMessageW
GetMenu
SetWindowLongW
GetActiveWindow
DispatchMessageW
GetWindow
DialogBoxParamW
MapDialogRect
RedrawWindow
MoveWindow
DestroyMenu
SetScrollPos
SetForegroundWindow
DestroyWindow
MsgWaitForMultipleObjects
SetParent
ScreenToClient

advapi32

RegDeleteKeyW

gdi32

SelectPalette
CreateCompatibleBitmap
CreatePalette
SelectObject
SetROP2
LPtoDP
ExtTextOutW
SetTextAlign
StretchDIBits
SetTextColor
SetBkColor

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6e8080344c216417631da09d43cc4a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

user32

advapi32

gdi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 164B

.reloc Size: 1024B - Virtual size: 712B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 164B

.reloc
Size: 1024B - Virtual size: 712B