c054dc3125e587004550f5f22cfd69eaff62ec2f5a6f0f1b82da8476e06dee42

Sharing

Copy URL Twitter E-mail

General

Target

c054dc3125e587004550f5f22cfd69eaff62ec2f5a6f0f1b82da8476e06dee42
Size

244KB
MD5

92690fe1c7d4bf638130d9b462ff3dc0
SHA1

4f3c24d9489a1c069692183920d9bcc1b84b066d
SHA256

c054dc3125e587004550f5f22cfd69eaff62ec2f5a6f0f1b82da8476e06dee42
SHA512

0e5a84ee993c0795104a93cd0a174e5ae5e43cfa24ccaad59c8fab4af18f2b71edd70747d104a2516b5d77906b318544eca51342885e355dd0f11433562422c7
SSDEEP

6144:V3HGtkgnAd0VLdpV+dHfvLB+OTbmFjd3L5ogmBK:V3mtkxduZXAHw5ogaK

Score

N/A

Malware Config

Signatures

Files

c054dc3125e587004550f5f22cfd69eaff62ec2f5a6f0f1b82da8476e06dee42
.dll regsvr32 windows x86

b5e2dbc009736c166d5886be86a8341f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetFileSize
WriteFile
DeleteFileW
CloseHandle
GetProcessHeap
LocalAlloc
SearchPathW
HeapFree
CreateFileW
GetFileType
SetEndOfFile
SetFilePointer
FlushFileBuffers
lstrcpyW
CreateDirectoryW
GetVersionExW
GetFileAttributesW
GetFullPathNameW
GetEnvironmentVariableW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
ExpandEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
SetLastError
GetLastError
GetModuleHandleW
LoadLibraryExW
MultiByteToWideChar
lstrcmpiW
GetModuleFileNameW
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryW
MulDiv
lstrcmpW
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
RaiseException
FindClose
FindNextFileW
FindFirstFileW
GetProcAddress

gdi32

DeleteDC
CreateFontIndirectW
CreatePen
LineTo
MoveToEx
CreateCompatibleBitmap
GetObjectW
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
BitBlt
CreateSolidBrush
CreateCompatibleDC

msvcr80

qsort
_wsplitpath_s
wcspbrk
_wcsnicmp
memcpy
__CxxFrameHandler3
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
wcstok_s
memmove_s
memcpy_s
_purecall
wcscpy_s
wcsrchr
??_U@YAPAXI@Z
swprintf_s
wcsncpy_s
malloc
??_V@YAXPAX@Z
free
_recalloc
_wtol
wcstoul
iswdigit
_itow_s
wcscat_s
wcsncpy
_wcsicmp
wcschr
_ultow_s
_vscwprintf
vswprintf_s
iswspace
memmove
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_itow
wcsspn

mscoree

StrongNameFreeBuffer
StrongNameErrorInfo
StrongNameKeyGen
StrongNameKeyInstall
GetCORSystemDirectory
LoadLibraryShim
GetFileVersion

user32

InvalidateRgn
GetDesktopWindow
GetDlgItem
GetParent
SetCapture
MoveWindow
ScreenToClient
ClientToScreen
CreateAcceleratorTableW
SetWindowPos
GetClassNameW
RedrawWindow
SendMessageW
IsWindow
GetWindow
SetFocus
GetFocus
IsChild
ReleaseDC
GetDC
EndPaint
FillRect
GetClientRect
BeginPaint
GetSysColor
DestroyAcceleratorTable
GetWindowTextW
GetWindowTextLengthW
RegisterWindowMessageW
CharNextW
GetWindowLongW
InvalidateRect
CallWindowProcW
DestroyWindow
CreateWindowExW
RegisterClassExW
GetClassInfoExW
LoadCursorW
SetWindowLongW
GetSystemMetrics
PtInRect
ShowWindow
EnableWindow
GetWindowRect
SendDlgItemMessageW
DialogBoxIndirectParamW
EndDialog
DialogBoxParamW
GetDlgCtrlID
SendMessageA
KillTimer
UnhookWindowsHookEx
MapWindowPoints
SystemParametersInfoW
IntersectRect
SetWindowsHookExW
UpdateWindow
SetCursor
GetCursorPos
SetCursorPos
SetTimer
SetDlgItemTextW
PostMessageW
DefWindowProcW
ReleaseCapture
MessageBoxW
GetActiveWindow
IsWindowEnabled
LoadStringW
UnregisterClassA
SetWindowTextW
CallNextHookEx

secur32

GetUserNameExW

comctl32

ImageList_LoadImageW
ImageList_Destroy

advapi32

CryptAcquireContextW
CryptAcquireContextA
CryptCreateHash
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegEnumKeyW
RegQueryValueExW
CryptReleaseContext
CryptGenKey
CryptDestroyKey
CryptGetUserKey
CryptExportKey
CryptGetProvParam
CryptEnumProvidersW
CryptHashData
CryptGetHashParam
CryptDestroyHash

ole32

CoTaskMemRealloc
OleInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
OleLockRunning
StringFromGUID2
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoCreateGuid

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen
OleCreateFontIndirect
SysStringByteLen
VarUI4FromStr
VariantInit
VariantClear
SysStringLen
LoadRegTypeLi
LoadTypeLi
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetElement
SetErrorInfo
GetErrorInfo
SysAllocStringByteLen
VarBstrCat
DispCallFunc
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b5e2dbc009736c166d5886be86a8341f

Headers

File Characteristics

Imports

kernel32

gdi32

msvcr80

mscoree

user32

secur32

comctl32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 143KB - Virtual size: 143KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 22KB - Virtual size: 22KB

.reloc Size: 7KB - Virtual size: 6KB

.text Size: 68KB - Virtual size: 68KB

.text
Size: 143KB - Virtual size: 143KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 22KB - Virtual size: 22KB

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 68KB - Virtual size: 68KB