70ece5ae78f8dd1c2735fcdae1bc47e31e51d9d269b566739fdfdd4e8d0a6a01

Sharing

Copy URL Twitter E-mail

General

Target

70ece5ae78f8dd1c2735fcdae1bc47e31e51d9d269b566739fdfdd4e8d0a6a01
Size

496KB
MD5

1892c9b7ce0b93c32d29ef5e6c99d91b
SHA1

e99c3867ea60d0f13f72f4815da299a75b24ec3b
SHA256

70ece5ae78f8dd1c2735fcdae1bc47e31e51d9d269b566739fdfdd4e8d0a6a01
SHA512

9b4d1892e5827359563f0ce8d4a880db9718f3bf302f45c33e0f30fc57884041003a1e7f9320649cfc24ab23fc0c24d924af8ddc0438800de42855ceb029790d
SSDEEP

12288:fytPfASAuSvQnbDHorHDKGwC4ZTJxlGRS:fy9fASOvQnoTDw3XC

Score

N/A

Malware Config

Signatures

Files

70ece5ae78f8dd1c2735fcdae1bc47e31e51d9d269b566739fdfdd4e8d0a6a01
.dll regsvr32 windows x64

b71031ac72c27db547b44e7ae017554b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LoadLibraryW
VirtualAlloc
SetStdHandle
WriteConsoleW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
HeapFree
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSize
FatalAppExitA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
FreeLibrary
CreateFileW

ole32

CoLoadLibrary

Exports

Exports

DllRegisterServer
StardxxsrtA
StarhhhcdtA
StartAuu
StatthbdesqrtA
e
sdxc
tttt
wwwqaji

Sections

.text
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b71031ac72c27db547b44e7ae017554b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Exports

Exports

Sections

.text Size: 273KB - Virtual size: 273KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 8KB - Virtual size: 17KB

.pdata Size: 9KB - Virtual size: 9KB

.rsrc Size: 162KB - Virtual size: 162KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 273KB - Virtual size: 273KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 8KB - Virtual size: 17KB

.pdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 162KB - Virtual size: 162KB

.reloc
Size: 2KB - Virtual size: 2KB