bf6232f28aaba4a88cc526cccf0ea53314fc38661286f8a4bacccd45af2ed1ca

Sharing

Copy URL Twitter E-mail

General

Target

bf6232f28aaba4a88cc526cccf0ea53314fc38661286f8a4bacccd45af2ed1ca
Size

340KB
MD5

9126fcf4fb0d68d0d34d84c35dfd7c60
SHA1

105c74ac32438827452c7fc457e5bd9876dab8a3
SHA256

bf6232f28aaba4a88cc526cccf0ea53314fc38661286f8a4bacccd45af2ed1ca
SHA512

beb789a8590ad15b48c5fc83661ba11cdc7282563e6f60254d6c405aa39d29f033db6fc9b4af9324b368928b91c5a40e83f1db6b2e5b7ee8e8aba991cfb063d0
SSDEEP

6144:JwOdj5eYbGp2j4BDZsB/YBDZVBDZ8wn1lPOtdAmBLRpx0hPFqBFvu0qHmTsyvfTd:Jw0j8yQ8W50eyvfN

Score

N/A

Malware Config

Signatures

Files

bf6232f28aaba4a88cc526cccf0ea53314fc38661286f8a4bacccd45af2ed1ca
.dll regsvr32 windows x86

cab90c763ebb877c0ddc2602c951ea4f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??3@YAXPAX@Z
memset
_purecall
memcpy
_vsnwprintf
??2@YAPAXI@Z
_ftol2

kernel32

CreateSemaphoreW
InterlockedExchange
GetProcAddress
GetModuleHandleW
SetThreadPriority
GetTickCount
CreateThread
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
MulDiv
DisableThreadLibraryCalls
InterlockedDecrement
lstrlenW
MultiByteToWideChar
lstrlenA
GetLastError
GetCurrentThreadId
GetModuleFileNameA
InterlockedIncrement
FreeLibrary
LoadLibraryW
GetCurrentProcess
lstrcmpW
ReleaseSemaphore
WaitForSingleObject
InitializeCriticalSection
ResetEvent
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventW
SetEvent
GetVersionExW

user32

GetWindowRect
GetDesktopWindow
IsRectEmpty
IsDlgButtonChecked
SendDlgItemMessageW
LoadStringW
CheckRadioButton
GetWindowLongW
SetWindowLongW
CreateDialogParamW
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcW

advapi32

RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegQueryValueExW
RegDeleteKeyW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
StringFromGUID2

msvfw32

StretchDIB

winmm

timeGetTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cab90c763ebb877c0ddc2602c951ea4f

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

ole32

msvfw32

winmm

Exports

Exports

Sections

.text Size: 241KB - Virtual size: 241KB

.data Size: 86KB - Virtual size: 91KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 241KB - Virtual size: 241KB

.data
Size: 86KB - Virtual size: 91KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 10KB - Virtual size: 9KB