1428667e96f0fdf71aef64760350a1a3a7ff3a8faa6e07213e065d64cc4dd1c5

Sharing

Copy URL Twitter E-mail

General

Target

1428667e96f0fdf71aef64760350a1a3a7ff3a8faa6e07213e065d64cc4dd1c5
Size

280KB
MD5

70988c9e830c7cbc8a890a650789bbf0
SHA1

91d2906b14f14219086503994f33a55d996bb4b4
SHA256

1428667e96f0fdf71aef64760350a1a3a7ff3a8faa6e07213e065d64cc4dd1c5
SHA512

2c285521b3761d3db6e12ba21848c2334fe5018de2ef970f840094edda2ed9b34f0817e40cf253ef5e5118892eadaa22992f2f9705362e6ccaa034b9287f3012
SSDEEP

6144:JHX4eMoGaNbZFtguWDkOmdP/MyZyHzyHN0u:JHX4ToGOZAuWouADHNd

Score

N/A

Malware Config

Signatures

Files

1428667e96f0fdf71aef64760350a1a3a7ff3a8faa6e07213e065d64cc4dd1c5
.dll regsvr32 windows x86

02e53b228b57b24bb0562f205a0b470e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameA
GetModuleHandleA
lstrlenW
GetModuleFileNameA
lstrcmpiA
HeapDestroy
FreeLibrary
GetProcAddress
LoadLibraryA
EnterCriticalSection
lstrlenA
CloseHandle
UnmapViewOfFile
GetFileAttributesA
WaitForSingleObject
CreateEventA
SetEvent
GetOEMCP
GetACP
GetStringTypeW
MultiByteToWideChar
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
WideCharToMultiByte
GetLastError
lstrcatA
lstrcpyA
GetCPInfo
lstrcpynA
GetStringTypeA
ResetEvent
GetWindowsDirectoryA
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
IsBadCodePtr
HeapSize
HeapReAlloc
LCMapStringA
SystemTimeToFileTime
TerminateProcess
SetLastError
MapViewOfFile
CreateFileMappingA
CreateFileA
QueryPerformanceFrequency
GetFileSize
FindClose
VirtualQuery
VirtualProtect
FindFirstFileA
SearchPathA
GetCurrentThreadId
ReadFile
LCMapStringW
ExitThread
TlsSetValue
GetCurrentProcess
Sleep
InterlockedExchange
RaiseException
RtlUnwind
CreateThread
HeapFree
TlsFree
TlsGetValue
GetCommandLineA
GetVersion
HeapAlloc
ExitProcess
SetUnhandledExceptionFilter
TlsAlloc

user32

wsprintfA
GetDesktopWindow
CharLowerBuffA
CharNextA
LoadStringA
GetMessageA
DispatchMessageA
PostThreadMessageA

advapi32

RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

ole32

CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CLSIDFromProgID
CoCreateInstance
StringFromCLSID
CoTaskMemFree

oleaut32

VariantCopyInd
LoadRegTypeLi
DispGetParam
SysStringByteLen
SafeArrayCreate
RegisterTypeLi
LoadTypeLi
CreateErrorInfo
SetErrorInfo
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocStringLen
SafeArrayDestroy
SysFreeString
SysStringLen
SysReAllocStringLen
VariantChangeType
SysAllocString
VariantCopy
VariantInit
VariantClear
SafeArrayPutElement
SafeArrayGetElement
SysAllocStringByteLen

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

02e53b228b57b24bb0562f205a0b470e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

version

Exports

Exports

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 16KB - Virtual size: 15KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 16KB - Virtual size: 15KB

.rmnet
Size: 60KB - Virtual size: 60KB