faffc731727bd99776cc09f24e478320763785f7d317daba1e36f65085127d93

Sharing

Copy URL Twitter E-mail

General

Target

faffc731727bd99776cc09f24e478320763785f7d317daba1e36f65085127d93
Size

268KB
MD5

0c5cee787a7ac89c361a1fe3d556ab70
SHA1

53e3a9c707aa6b95a59a47d7c558b2cb294319db
SHA256

faffc731727bd99776cc09f24e478320763785f7d317daba1e36f65085127d93
SHA512

ce8d556d67c9556bd26b8372fc6ebef5203cca967c37919cba1824c4c9ca4dc990587511e9d736eac5da5561e8be82322c5693a3e10080d593de80ae6cc30646
SSDEEP

6144:pBms8X402bCPU6HBuY7rJIIV0SZsEOtlz1X9XiMUYmZ7:fms8XD2ApBu2JIg0SZsEozLyfVZ7

Score

N/A

Malware Config

Signatures

Files

faffc731727bd99776cc09f24e478320763785f7d317daba1e36f65085127d93
.dll regsvr32 windows x86

565da0498a3e85f6206a1133c8e892b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GetVersionExA
CreateFileA
LocalAlloc
InterlockedExchange
RaiseException
GetFileSize
SetFilePointer
ReadFile
DisableThreadLibraryCalls
FindClose
lstrcpyA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
SizeofResource
SetLastError
WaitForSingleObject
CreateEventA
CreateThread
SetThreadPriority
CloseHandle
SetEvent
GetCurrentProcess
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetCurrentThreadId
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
LoadResource
LockResource

gdi32

SelectObject
SaveDC
SetTextColor
GetObjectA
CreateFontIndirectA
RestoreDC
DeleteObject
GetDeviceCaps

user32

CallNextHookEx
GetFocus
IsChild
SetFocus
UnhookWindowsHookEx
SendMessageA
GetDC
UnregisterClassA
SetWindowsHookExA
GetKeyState
PeekMessageA
TranslateMessage
GetWindowTextA
SetWindowTextA
SetRect
GetMessagePos
MoveWindow
MessageBeep
GetParent
CreateWindowExA
GetWindow
MapDialogRect
SetWindowContextHelpId
SendDlgItemMessageA
DestroyWindow
CallWindowProcA
DefWindowProcA
WinHelpA
IsIconic
ShowWindow
BringWindowToTop
PostQuitMessage
EnumChildWindows
CreateDialogParamA
EnableWindow
IsDlgButtonChecked
CheckDlgButton
LoadBitmapA
EndDialog
GetWindowLongA
PostMessageA
SetForegroundWindow
IsDialogMessageA
GetDlgItem
GetWindowRect
SetWindowPos
SetWindowLongA
GetSysColor
LoadCursorA
SetCursor
IsWindowUnicode
GetClientRect
ChildWindowFromPoint
DispatchMessageA

advapi32

RegEnumKeyA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

oleaut32

SysStringLen
SysAllocStringLen
VariantInit
VariantClear
SysAllocString
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SetErrorInfo
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VarBstrCat
SysFreeString

ole32

CLSIDFromString
CoTaskMemFree
StringFromGUID2
CreateStreamOnHGlobal
CoCreateInstance

wininet

DeleteUrlCacheEntryW
DeleteUrlCacheEntryA

atl70

ord23
ord61
ord15
ord46
ord30
ord49
ord64
ord22
ord18
ord48
ord60
ord38
ord40
ord42
ord44
ord43
ord31
ord58
ord10
ord11
ord32

msvcr70

wcscat
swprintf
wcstoul
wcsncat
_wtoi
malloc
realloc
free
memmove
wcschr
_purecall
_ltow
_itow
_wcsicmp
wcslen
wcsncpy
??2@YAPAXI@Z
??_U@YAPAXI@Z
wcscpy
_wcsnicmp
memset
wcscmp
??_V@YAXPAX@Z
??3@YAXPAX@Z
_wsplitpath
_except_handler3
_wmakepath
mbstowcs
_itoa
strtol
_wtol
_ltoa
wcstombs
wcsncmp
wcsrchr
_initterm
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

565da0498a3e85f6206a1133c8e892b1

Headers

File Characteristics

Imports

kernel32

gdi32

user32

advapi32

oleaut32

ole32

wininet

atl70

msvcr70

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 171KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 12KB - Virtual size: 11KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 172KB - Virtual size: 171KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 12KB - Virtual size: 11KB

.rmnet
Size: 60KB - Virtual size: 60KB