944537d861c89e485779a6079c93cda64dafa923c18a3f1f8dd27ae8b80ca551

Sharing

Copy URL Twitter E-mail

General

Target

944537d861c89e485779a6079c93cda64dafa923c18a3f1f8dd27ae8b80ca551
Size

1.3MB
MD5

0e04070f4c37800c8038a2cdf50a7940
SHA1

2354448d65eb0628a2fcc78b20adeb843b4ecea5
SHA256

944537d861c89e485779a6079c93cda64dafa923c18a3f1f8dd27ae8b80ca551
SHA512

fa017e600a798cdaad2c3d2de625202b5364917ad9fcc23e1c9bb3d20b9745d52e31a9469196aed8569e636c1f6082dbc8031309fb12f943e1f61e40accb4942
SSDEEP

24576:12YEWq7qdYzq09ZglX3f+fjR2vl3+GBxLMS:4Xql092lX3f+wJ+GgS

Score

N/A

Malware Config

Signatures

Files

944537d861c89e485779a6079c93cda64dafa923c18a3f1f8dd27ae8b80ca551
.dll regsvr32 windows x86

fe5fbd2d8af9aaf2475a9b73724cfafb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
SetEndOfFile
GetFileSize
InitializeCriticalSectionAndSpinCount
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
RtlUnwind
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetCommandLineA
HeapReAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
LockFile
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
GetStdHandle
HeapCreate
HeapDestroy
SetHandleCount
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
CreateFileA
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
lstrcmpA
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SetErrorMode
DisableThreadLibraryCalls
GetModuleFileNameA
LoadLibraryA
lstrlenA
GetTickCount
GetCurrentThread
VirtualAlloc
CreateSemaphoreW
GetCurrentProcess
DuplicateHandle
lstrcmpW
VirtualFree
ReleaseSemaphore
ResetEvent
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
DebugBreak
GetFullPathNameW
GetTempFileNameW
GetCurrentThreadId
OutputDebugStringW
GetTempPathW
IsDBCSLeadByteEx
CreateFileW
GetVolumeInformationW
FindFirstFileW
FindClose
RaiseException
GetSystemInfo
GetStartupInfoW
IsBadReadPtr
lstrcpynW
WaitForMultipleObjects
FindNextChangeNotification
Sleep
FindCloseChangeNotification
FindFirstChangeNotificationW
VirtualQuery
MulDiv
SetThreadPriority
ResumeThread
GetSystemDirectoryW
CreateThread
SetEvent
CreateEventW
InterlockedExchange
CloseHandle
WaitForSingleObject
TerminateThread
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetVersionExW
lstrcpyW
FreeLibrary
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
MultiByteToWideChar
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetCPInfo
GetModuleHandleA

user32

SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
SetCursor
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
RealChildWindowFromPoint
GetMessageTime
GetMessagePos
MonitorFromWindow
TrackPopupMenu
GetKeyState
SetMenu
UpdateWindow
MessageBoxW
GetClassInfoExW
RegisterClassW
ScreenToClient
PtInRect
GetDlgCtrlID
CallWindowProcW
GetMenuState
ShowWindow
MoveWindow
PeekMessageW
EnumWindows
GetWindowThreadProcessId
CharLowerBuffW
UnionRect
EqualRect
InflateRect
SetRect
IsRectEmpty
RegisterWindowMessageW
GetCursorPos
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
DestroyIcon
SetForegroundWindow
SetTimer
AppendMenuW
CreatePopupMenu
ValidateRect
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
KillTimer
UnregisterClassW
GetTopWindow
CharUpperW
UnhookWindowsHookEx
PostQuitMessage
PostMessageW
CallNextHookEx
InvalidateRect
SetDlgItemTextA
GetDlgItem
GetDesktopWindow
GetWindowRect
DestroyWindow
CreateDialogParamW
EnableWindow
wvsprintfW
wsprintfW
GetDC
ReleaseDC
DrawTextW
IntersectRect
OffsetRect
CreateWindowExW
AdjustWindowRectEx
SetWindowPos
GetClientRect
GetWindowLongW
SetWindowLongW
IsWindow
GetActiveWindow
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetSysColorBrush
GetSystemMetrics
EnumDisplayMonitors
GetMonitorInfoW
GetParent
MapWindowPoints
SetRectEmpty
CopyRect
SystemParametersInfoW
LoadCursorW
GetSysColor
GetClassNameW
DefWindowProcW
GetClassInfoW
SendMessageW
GetWindow
IsWindowVisible

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
GetClipBox
ScaleWindowExtEx
ExtTextOutW
PtVisible
CreateBitmap
RectVisible
GetKerningPairsW
CreateDIBitmap
RestoreDC
SaveDC
SetBkColor
CloseFigure
EndPath
GetPath
AbortPath
BeginPath
TextOutW
AddFontResourceW
TranslateCharsetInfo
GetTextExtentPoint32W
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
SetTextColor
SetBkMode
SetMapMode
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
GetDeviceCaps
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueExW
RegDeleteValueW
RegOpenKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegCreateKeyW
RegSetValueW
RegEnumKeyExW

shell32

SHBrowseForFolderW
ShellExecuteW
Shell_NotifyIconW
SHGetPathFromIDListW

shlwapi

PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
UrlUnescapeW

ole32

StringFromGUID2
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
CoInitializeEx
CoCreateGuid
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries

oleaut32

SysStringLen
SysFreeString
SysAllocString
OleCreatePropertyFrame
VariantInit
VariantClear
VarBstrCmp
VariantChangeType

wininet

InternetOpenUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile

winmm

timeGetTime

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

CleanupHdmv
CleanupSup
CopySupItem
DecodeRLEData
DirectVobSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetVideoDescHdmv
GetVideoDescSup
InitHdmv
OpenSupFile
ParseHdmvSample
ReleaseHdmvItems
VirtualdubFilterModuleDeinit
VirtualdubFilterModuleInit2
_AvisynthPluginInit2@4
_AvisynthPluginInit@4
csri_close
csri_open_file
csri_open_mem
csri_query_ext
csri_render
csri_renderer_byname
csri_renderer_default
csri_renderer_info
csri_renderer_next
csri_request_fmt

Sections

.text
Size: 917KB - Virtual size: 917KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fe5fbd2d8af9aaf2475a9b73724cfafb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

wininet

winmm

version

Exports

Exports

Sections

.text Size: 917KB - Virtual size: 917KB

.rdata Size: 215KB - Virtual size: 215KB

.data Size: 49KB - Virtual size: 139KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 91KB - Virtual size: 90KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 917KB - Virtual size: 917KB

.rdata
Size: 215KB - Virtual size: 215KB

.data
Size: 49KB - Virtual size: 139KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 91KB - Virtual size: 90KB

.rmnet
Size: 56KB - Virtual size: 60KB