440c9a86e4b1059b6b166185e1df5a70039cec0ece978d55ebb430e7517e89ad

Sharing

Copy URL Twitter E-mail

General

Target

440c9a86e4b1059b6b166185e1df5a70039cec0ece978d55ebb430e7517e89ad
Size

188KB
MD5

43b108fb0dd85792a889aa9d76bd2c60
SHA1

107b53a2f2c79df53b9f734a1f3c504967c3572b
SHA256

440c9a86e4b1059b6b166185e1df5a70039cec0ece978d55ebb430e7517e89ad
SHA512

d96888ccb95ec8af481ec19bfd2846476e9a67f342230e62b226819a8e064f9d7d932f6075709204fa3bdc696d2ce66f729e3a3e9c29810fe5ca4434b0ddbc57
SSDEEP

3072:JzRFiOL+eYg7sArG3ZK8QD2RtoWcPSAQCsMx9xncvg1hBAyuq+qBy4P7M4a:Jzjj7sAr7EtoRSDCxnxncolAl2M4a

Score

N/A

Malware Config

Signatures

Files

440c9a86e4b1059b6b166185e1df5a70039cec0ece978d55ebb430e7517e89ad
.dll regsvr32 windows x86

9eddf75899441c531f327d2ce659a60d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW

gdi32

GetDeviceCaps

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcess
SetProcessWorkingSetSize
GlobalDeleteAtom
GlobalAddAtomW
RaiseException
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcmpiW
GetModuleFileNameW
GetModuleHandleW
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
lstrcpynW
CompareStringW
GetVersionExW
WaitForSingleObject
GetExitCodeThread
SetLastError
QueryDosDeviceW
GetVersion
CreateFileA
DeviceIoControl
CreateFileW
GetDriveTypeW
lstrcpyW
GetLastError
WideCharToMultiByte
MultiByteToWideChar
Sleep
CloseHandle
CompareStringA
GetFileAttributesW
SetErrorMode
CreateMutexW

mpr

WNetGetConnectionW
WNetCancelConnection2W
WNetAddConnection2W

msvcrt

_wcsnicmp
wcslen
wcschr
wcscmp
??2@YAPAXI@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
memmove
_purecall
??3@YAXPAX@Z
wcsstr
towupper
_wtoi
iswdigit
_wtol
iswspace
_vsnwprintf
_except_handler3
free
wcsncpy
_snwprintf
_beginthreadex
_wcsicmp
wcsncmp
wcsrchr
wcspbrk

ole32

RegisterDragDrop
RevokeDragDrop
StringFromCLSID
CoTaskMemFree
CoCreateInstance
OleLockRunning
CoUnmarshalInterface
CoMarshalInterface
CreateStreamOnHGlobal

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
LoadTypeLi
RegisterTypeLi
SysStringLen
LoadRegTypeLi
VariantClear
VariantInit
VariantCopy
VariantChangeType

shell32

ShellExecuteExW

shlwapi

PathGetCharTypeA
PathGetCharTypeW

user32

GetWindowLongW
SetWindowLongW
BeginPaint
EndPaint
UnregisterClassW
DestroyAcceleratorTable
GetClientRect
CreateAcceleratorTableW
DefWindowProcW
InvalidateRgn
InvalidateRect
SetFocus
GetFocus
IsWindow
DestroyWindow
GetDC
ReleaseDC
KillTimer
SetTimer
UnregisterHotKey
SetRect
EqualRect
GetWindowRect
GetWindow
GetTopWindow
FillRect
SetLayeredWindowAttributes
GetDesktopWindow
GetClassNameA
GetWindowThreadProcessId
CreateWindowExW
RegisterHotKey
IsIconic
GetParent
SendMessageTimeoutA
RegisterClassW
LoadCursorW
CharNextW
LoadStringW
PostMessageW
ShowWindow
GetClassNameW
FindWindowW
EnumWindows
SetForegroundWindow
SendMessageW
GetCursorPos
IsWindowVisible
CharNextA
GetAsyncKeyState
SetWindowPos

uxtheme

CloseThemeData
OpenThemeData
DrawThemeParentBackground

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9eddf75899441c531f327d2ce659a60d

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

mpr

msvcrt

ole32

oleaut32

shell32

shlwapi

user32

uxtheme

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 112KB - Virtual size: 112KB