fca35ded6ca0f8065eb0891ad5ba523b046fa72966b5881a01497530dc5f6e75

General

Target

fca35ded6ca0f8065eb0891ad5ba523b046fa72966b5881a01497530dc5f6e75
Size

72KB
MD5

846755daf52ce6ace7a7b24c48f908bb
SHA1

1aa144c9bdbd9f466de6156f0c29c917ec6d47ec
SHA256

fca35ded6ca0f8065eb0891ad5ba523b046fa72966b5881a01497530dc5f6e75
SHA512

0e09157730abd49244f137cc289b18c187fad1d48d1bcf74a3f82651a570012689a8cefee1320439924291e9f49d16283858aa867210eab8c702fd3c613e792d
SSDEEP

1536:+O3s+Hid+8xdJuw3BxmVXyppRZMztVbSMDcV:+O3sddDXxQ9ytMeSy

Score

N/A

Malware Config

Signatures

Files

fca35ded6ca0f8065eb0891ad5ba523b046fa72966b5881a01497530dc5f6e75
.dll regsvr32 windows x86

ba59bf468836960be827366f979e89b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_amsg_exit
_initterm
free
malloc
_XcptFilter

rpcrt4

NdrDllCanUnloadNow
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllGetClassObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 51B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba59bf468836960be827366f979e89b0

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.orpc Size: 512B - Virtual size: 51B

.data Size: 61KB - Virtual size: 61KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.orpc
Size: 512B - Virtual size: 51B

.data
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB