IJRegistUninstaller
Static task
static1
Behavioral task
behavioral1
Sample
1b2cc1ee903e8b89582b52d72003c13250c9a837015070d7795700ab86964a7c.dll
Resource
win7-20220901-en
General
-
Target
1b2cc1ee903e8b89582b52d72003c13250c9a837015070d7795700ab86964a7c
-
Size
232KB
-
MD5
1361d74739396d1169f3352396793cc0
-
SHA1
114b732b4dac958d31affc621cb16c9cca220f88
-
SHA256
1b2cc1ee903e8b89582b52d72003c13250c9a837015070d7795700ab86964a7c
-
SHA512
490f857b4d70bcafa986e2d3a64ee65634ae11462dc4f94510e4559e48de9274496ac5ea85389131938b64e28e4a612a955d0466b7d9c7500ee2f9f475c85397
-
SSDEEP
6144:Y5J+IR+1Y9kPOm9McsZGWAuE5gjPLCoc:FIAaOPOIMcmREAi
Malware Config
Signatures
Files
-
1b2cc1ee903e8b89582b52d72003c13250c9a837015070d7795700ab86964a7c.dll windows x86
41c4c7fccea425213d1df99006b1ac0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupGetInfInformationW
SetupGetStringFieldW
SetupQueryInfOriginalFileInformationW
SetupFindFirstLineW
SetupOpenInfFileW
SetupDiGetINFClassW
SetupDiGetSelectedDriverW
SetupDiOpenDevRegKey
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupIterateCabinetW
SetupDiGetDriverInfoDetailW
SetupCloseInfFile
shell32
SHGetSpecialFolderPathW
ord51
kernel32
CreateDirectoryW
DeleteFileW
GetTempFileNameW
GetTempPathW
SetCurrentDirectoryW
GetFileAttributesW
GetCurrentDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetLastError
GetSystemDirectoryW
SetFileAttributesW
CopyFileW
SetErrorMode
GetPrivateProfileStringW
GetPrivateProfileIntW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
ReadFile
WriteFile
GetFileSize
SetLastError
GetWindowsDirectoryW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetPrivateProfileSectionW
MultiByteToWideChar
SetThreadLocale
GetUserDefaultLangID
GetSystemDefaultLCID
GetUserDefaultLCID
GetSystemDefaultLangID
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
LoadLibraryW
ExpandEnvironmentStringsW
RemoveDirectoryW
WideCharToMultiByte
lstrlenW
GetSystemInfo
GetVersionExW
GetConsoleOutputCP
CreateFileW
CloseHandle
GetLocalTime
GetModuleFileNameW
FormatMessageW
OutputDebugStringW
WriteConsoleA
LoadLibraryA
LocalFree
GetModuleHandleW
GetProcAddress
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
CreateFileA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
Sleep
LCMapStringW
LCMapStringA
GetStartupInfoA
SetHandleCount
VirtualAlloc
VirtualFree
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
HeapCreate
IsValidCodePage
GetLocaleInfoA
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
GetStringTypeW
GetStringTypeA
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteConsoleW
GetFileType
GetStdHandle
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetConsoleMode
user32
UnregisterClassA
FindWindowW
SendMessageW
IsWindow
winspool.drv
GetPrinterDriverDirectoryW
advapi32
RegOpenKeyW
RegLoadKeyW
RegUnLoadKeyW
RegSetValueExW
RegDeleteValueW
RegCreateKeyW
RegQueryValueExW
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCloseKey
ole32
CoInitialize
CoCreateInstance
CoUninitialize
shlwapi
PathAddBackslashW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Exports
Exports
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE