e988ad6f712abc4eb339c992e8561615b69c8d887660c0d1118fb4192d0222a6

Sharing

Copy URL Twitter E-mail

General

Target

e988ad6f712abc4eb339c992e8561615b69c8d887660c0d1118fb4192d0222a6
Size

488KB
MD5

52df19da22f710d6ccfcb67dab7753af
SHA1

89a289d8e158c75fe29a3a8972b493cd197fe4be
SHA256

e988ad6f712abc4eb339c992e8561615b69c8d887660c0d1118fb4192d0222a6
SHA512

01edb210de16277373e0b65620178792d1b776ca7d03dc1d3f6d63790c65f6033a28940bd341f5514eb65e59bb73a6ccf2474f7c2ed45a7da2bbb773b65187cf
SSDEEP

12288:qRk4ru5IJC8zRe+Ahl8O1ofrVzQINROOsZ:qRkSrw8Ve+AD8qofrVzQIOOs

Score

N/A

Malware Config

Signatures

Files

e988ad6f712abc4eb339c992e8561615b69c8d887660c0d1118fb4192d0222a6
.dll regsvr32 windows x86

b9e7f46689afb4013539f0d2d2be8b10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
FormatMessageA
GetACP
lstrcmpA
GetCurrentProcess
GetVolumeInformationA
GetCurrentThreadId
FlushInstructionCache
ReadFile
SetFilePointer
CreateFileA
FreeResource
CloseHandle
GetFileSize
GetTimeZoneInformation
GetLocalTime
DeleteFileA
GlobalHandle
GlobalAlloc
VirtualAlloc
OutputDebugStringA
GetComputerNameA
DebugBreak
HeapReAlloc
HeapFree
LoadResource
SizeofResource
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
lstrlenW
HeapCreate
GetVersionExA
GetSystemInfo
HeapAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
MulDiv
LockResource
InterlockedIncrement
GlobalLock
GlobalUnlock
lstrcpyA
InterlockedDecrement
lstrcatA
DeleteCriticalSection
LoadLibraryA
GetProcAddress
LeaveCriticalSection
HeapDestroy
EnterCriticalSection
lstrcpynA
InitializeCriticalSection
IsDBCSLeadByte
GetLastError
lstrcmpiA
LoadLibraryExA
WriteFile
FindResourceA
VirtualFree
GetSystemTime
GetWindowsDirectoryA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStdHandle
TlsGetValue
GetStringTypeA
TlsSetValue
GetSystemTimeAsFileTime
GlobalReAlloc
RtlUnwind
FlushFileBuffers
SetStdHandle
ExitProcess
TerminateProcess
GetCPInfo
WideCharToMultiByte
GetOEMCP
LCMapStringA
LCMapStringW
SetLastError

user32

CreateDialogParamA
GetKeyState
GetClassInfoExA
CharNextA
LoadCursorA
FillRect
DefWindowProcA
GetWindowLongA
CallWindowProcA
CreateWindowExA
GetDlgItemTextA
GetFocus
IsChild
GetMessageA
MessageBoxW
LoadBitmapA
PostMessageA
SendDlgItemMessageA
CharUpperA
MessageBoxA
EnableWindow
SetTimer
DialogBoxParamA
KillTimer
InvalidateRgn
SetCapture
ReleaseCapture
CreateAcceleratorTableA
LoadStringA
GetDialogBaseUnits
IsDialogMessageA
SetFocus
ShowWindow
GetParent
DestroyWindow
IsWindow
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
GetDC
InvalidateRect
EndPaint
GetClientRect
BeginPaint
MoveWindow
WinHelpA
PeekMessageA
DispatchMessageA
wsprintfA
RegisterClassExA
GetDesktopWindow
CharLowerBuffA
SetWindowLongA
EndDialog
RedrawWindow
SetDlgItemTextA
GetSysColor
SetDlgItemInt
GetWindow
GetWindowTextA
SetWindowTextA
GetActiveWindow
RegisterWindowMessageA
DialogBoxIndirectParamA
GetDlgItemInt
wvsprintfA
SendMessageA
GetDlgItem
UnionRect
GetWindowTextLengthA
PtInRect
GetClassNameA
TranslateMessage

gdi32

DeleteMetaFile
SetWindowExtEx
SetWindowOrgEx
RestoreDC
CreateMetaFileA
GetDeviceCaps
SaveDC
SetViewportOrgEx
SetMapMode
DeleteDC
CreateDCA
DeleteObject
LPtoDP
GetTextMetricsA
SelectObject
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
GetObjectA
CreateCompatibleBitmap
GetStockObject
CreateRectRgnIndirect
CloseMetaFile

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA

shell32

ShellExecuteA

ole32

OleLockRunning
StringFromCLSID
CLSIDFromString
ProgIDFromCLSID
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLoadFromStream
CoGetClassObject
CoGetMalloc
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CreateOleAdviseHolder
CreateDataAdviseHolder

oleaut32

SafeArrayGetUBound
SetErrorInfo
VariantInit
OleCreateFontIndirect
VariantCopy
SafeArrayRedim
DispCallFunc
SysAllocStringByteLen
OleCreatePropertyFrame
SysStringByteLen
VariantChangeType
VariantClear
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysAllocStringLen
SafeArrayDestroy
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysFreeString
CreateErrorInfo

comctl32

PropertySheetA
CreatePropertySheetPageA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9e7f46689afb4013539f0d2d2be8b10

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

Exports

Exports

Sections

.text Size: 264KB - Virtual size: 260KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 88KB - Virtual size: 93KB

.rsrc Size: 88KB - Virtual size: 84KB

.reloc Size: 20KB - Virtual size: 18KB

.text
Size: 264KB - Virtual size: 260KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 88KB - Virtual size: 93KB

.rsrc
Size: 88KB - Virtual size: 84KB

.reloc
Size: 20KB - Virtual size: 18KB