27b790d7e3573fd330ee319109dd0c7fb590dd574538a23598de21d6997d0190

Sharing

Copy URL Twitter E-mail

General

Target

27b790d7e3573fd330ee319109dd0c7fb590dd574538a23598de21d6997d0190
Size

308KB
MD5

0d36529089cfc73078a970cc0ea522d0
SHA1

7d7587647bc0821e812a674f19620ec4242a6965
SHA256

27b790d7e3573fd330ee319109dd0c7fb590dd574538a23598de21d6997d0190
SHA512

8065dcf179974b806f7a27e3ec03c7361c985d32f19642d674792ab94c3ce1d72b67d65ace5ff7a97704367fdd4feba18ef82a14eda53349d1ac369789f30488
SSDEEP

6144:e6QlFKuIXrznO2I0Xrp55ttpbYa06T/60nGAkPj2sK+C2pcZ70b/9p91H1nujzAG:eVTAHvVe9P1M0TO

Score

N/A

Malware Config

Signatures

Files

27b790d7e3573fd330ee319109dd0c7fb590dd574538a23598de21d6997d0190
.dll regsvr32 windows x86

56cbfc6e29311edd86a371dbb3cf8ffc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA

kernel32

HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
lstrcpyA
FreeEnvironmentStringsA
IsDBCSLeadByte
lstrcmpiA
TerminateProcess
SetEndOfFile
GetStartupInfoA
GetStdHandle
SetHandleCount
SetStdHandle
GetProcAddress
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
IsBadWritePtr
VirtualAlloc
ExitProcess
VirtualFree
HeapCreate
GetVersion
GetCommandLineA
HeapReAlloc
GetLocalTime
GetSystemTime
GetTimeZoneInformation
CreateFileA
GetFileType
SetFilePointer
CloseHandle
ReadFile
RtlUnwind
HeapAlloc
HeapFree
FindFirstFileA
FindNextFileA
GetLastError
FindClose
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
WideCharToMultiByte
lstrlenW
lstrlenA
lstrcpynA
lstrcmpA
MultiByteToWideChar
GetCurrentDirectoryA
SetCurrentDirectoryA
FreeLibrary
GetCurrentProcess
FlushInstructionCache
LoadLibraryA
FreeEnvironmentStringsW

shell32

SHGetMalloc
SHGetFolderPathA
SHBrowseForFolderA
SHGetPathFromIDListA

gdiplus

GdipDeleteBrush
GdipCreateBitmapFromFileICM
GdipGetImageWidth
GdipGetImageHeight
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipDrawImageI
GdiplusShutdown
GdipDisposeImage
GdipCloneImage
GdipCloneBrush
GdiplusStartup
GdipAlloc
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipFillRectangleI
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipFree

ddraw

DirectDrawCreate

winmm

timeGetTime

user32

IsDlgButtonChecked
EndDialog
LoadStringA
wsprintfW
CharNextA
GetWindowRect
DialogBoxParamA
GetForegroundWindow
GetDesktopWindow
CallWindowProcA
UnhookWindowsHookEx
DestroyWindow
PostMessageA
SetCursor
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
IsWindowUnicode
SetWindowsHookExA
UpdateWindow
DefWindowProcA
GetAsyncKeyState
CallNextHookEx
GetFocus
GetWindowLongA
wsprintfA
GetDlgItem
RegisterWindowMessageA
GetClientRect
GetDC
ReleaseDC
SetWindowLongA
SendMessageA
ShowWindow
CheckDlgButton

gdi32

SetTextColor
SetTextAlign
TextOutA
StretchDIBits
GetDeviceCaps
SetBkColor
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateDIBitmap

comdlg32

ChooseColorA

advapi32

RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemRealloc

oleaut32

SysAllocString
LoadRegTypeLi
VarUI4FromStr
SysStringLen
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56cbfc6e29311edd86a371dbb3cf8ffc

Headers

File Characteristics

Imports

comctl32

kernel32

shell32

gdiplus

ddraw

winmm

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 194KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 13KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 12KB - Virtual size: 10KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 196KB - Virtual size: 194KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 13KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 12KB - Virtual size: 10KB

.rmnet
Size: 60KB - Virtual size: 60KB