cf40ebe4438cb808d7aed06f7356929a69057ab79e41e66bcfd38c6bb5d834b2

Sharing

Copy URL Twitter E-mail

General

Target

cf40ebe4438cb808d7aed06f7356929a69057ab79e41e66bcfd38c6bb5d834b2
Size

193KB
MD5

96829b191bb61cb05b2428d3e13d25a0
SHA1

32c646de96cb40fe33760768bee37a9d8508a2c8
SHA256

cf40ebe4438cb808d7aed06f7356929a69057ab79e41e66bcfd38c6bb5d834b2
SHA512

8c8bc9f7e9a810c13fa9f4eceefc5d391be3fff7df4c2d2abdf8b4c90571f4024207cc8664a5adb544be5846fed9488a90160ccc568af5ca15f3d84988a42e57
SSDEEP

3072:1vUdodU0MJAEIr5kKmvcd7vOoclGHV7sptS2mUk66UnIyj353PTEh4pfopXH:1vCbzAvNhjOoc4HV74S2mmrVPT7eB

Score

N/A

Malware Config

Signatures

Files

cf40ebe4438cb808d7aed06f7356929a69057ab79e41e66bcfd38c6bb5d834b2
.dll regsvr32 windows x86

03765787a637de275e40ba2840bed498

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
IsWindowEnabled

shell32

SHGetFolderPathW

kernel32

GetOEMCP
FlushFileBuffers
IsBadReadPtr
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapValidate
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetCPInfo
IsValidCodePage
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
WriteFile
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle

Exports

Exports

DllCLOXfF
DllGetClassObject
DllRegisterServer
DllrTGLc
Rofa

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03765787a637de275e40ba2840bed498

Headers

File Characteristics

Imports

user32

shell32

kernel32

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 124KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 124KB - Virtual size: 124KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 14KB - Virtual size: 13KB