35004b46bf28b2db1aac0e45d1451e43fdb0d16d10246b883b63f38ce1b11c65

Sharing

Copy URL

Twitter E-mail

General

Target

35004b46bf28b2db1aac0e45d1451e43fdb0d16d10246b883b63f38ce1b11c65
Size

403KB
MD5

0d22ffe7e4e3f96d1875f2e97b66b36e
SHA1

a7ac5e0534bcd6cb18ecb91a54b35af8ac10c678
SHA256

35004b46bf28b2db1aac0e45d1451e43fdb0d16d10246b883b63f38ce1b11c65
SHA512

d5fe1c344e7d286ee6aaa508ed32ae50dfaae1e761399a8186a3527744f58496adb3d3df170caede28dbf5974a24562d5b4800e60f1c3fcc207c28312aa3f8a3
SSDEEP

6144:2dssCTokQkaUGp5F0koa+bS15tJ1KI715ta15th3lwg1IXEU8qWc2xihPFqBFvnK:2dssCToVKOEIU5B4WSrgGuhs

Score

N/A

Malware Config

Signatures

Files

35004b46bf28b2db1aac0e45d1451e43fdb0d16d10246b883b63f38ce1b11c65
.dll regsvr32 windows x86

17724de197367562e6769e8ab19ad122

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??2@YAPAXI@Z
_purecall
_ftol
_except_handler3
??3@YAXPAX@Z

user32

GetDesktopWindow
GetWindowLongW
LoadStringW
IsRectEmpty
IsDlgButtonChecked
SendDlgItemMessageW
CheckRadioButton
wsprintfW
SetWindowLongW
CreateDialogParamW
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcW
GetWindowRect

advapi32

RegEnumKeyExW
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW

ole32

CoInitialize
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

msvfw32

StretchDIB

winmm

timeGetTime

kernel32

LoadLibraryA
TerminateProcess
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetVersionExW
DisableThreadLibraryCalls
lstrlenW
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleFileNameA
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
ReleaseSemaphore
lstrcmpW
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
GetProcAddress
lstrcpyW
InterlockedExchange
SetThreadPriority
GetTickCount
CreateThread
MulDiv
QueryPerformanceCounter

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17724de197367562e6769e8ab19ad122

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

ole32

msvfw32

winmm

kernel32

Exports

Exports

Sections

.text Size: 226KB - Virtual size: 225KB

.data Size: 22KB - Virtual size: 26KB

.rsrc Size: 143KB - Virtual size: 143KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 226KB - Virtual size: 225KB

.data
Size: 22KB - Virtual size: 26KB

.rsrc
Size: 143KB - Virtual size: 143KB

.reloc
Size: 10KB - Virtual size: 9KB