50e1f5fa72af4e9b3c4021d4cea01991f3f658f14ee3970f45dac26b75139f80

Sharing

Copy URL

Twitter E-mail

General

Target

50e1f5fa72af4e9b3c4021d4cea01991f3f658f14ee3970f45dac26b75139f80
Size

1.1MB
MD5

316cc664d6381bd636ae26f2a3a56a90
SHA1

47cc9e88d17f414c1dfb1825a05f42fe2609cab0
SHA256

50e1f5fa72af4e9b3c4021d4cea01991f3f658f14ee3970f45dac26b75139f80
SHA512

3b7a733de809960c3ebcaf71df2d733868f4dba410f4dd00247ec8bb76d06e90448b5827b9823626576c2e15c72345cb68f0cbd7822b4bbfe16403f693d36f5e
SSDEEP

24576:x5jHIOU63Z5RuvvR+aFAHqdMx9jDSCIl7mqo67apwtaA+JEOPaLIl6PIJiHc4bhg:xrU63HlmDUOABrWeuJAD

Score

N/A

Malware Config

Signatures

Files

50e1f5fa72af4e9b3c4021d4cea01991f3f658f14ee3970f45dac26b75139f80
.dll regsvr32 windows x86

bc2c76c742fb19908505d33890e61674

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
SetEndOfFile
ReadFile
FlushFileBuffers
CreateFileA
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
RtlUnwind
VirtualProtect
GetCommandLineA
CreateThread
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetModuleFileNameA
HeapFree
HeapSize
HeapAlloc
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetProcessHeap
DuplicateHandle
GetCurrentThread
CloseHandle
GetModuleHandleA
GetVersionExA
TlsAlloc
GetProcAddress
TlsFree
InterlockedExchange
Sleep
OutputDebugStringA
WaitForSingleObject
GetExitCodeThread
VirtualQuery
GetThreadContext
ResumeThread
SuspendThread
SetEvent
ResetEvent
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreA
HeapDestroy
HeapCreate
SetLastError
GetSystemInfo
RaiseException
WideCharToMultiByte
FreeLibrary
FormatMessageA
LoadLibraryExA
LoadLibraryA
LoadResource
SizeofResource
LockResource
FindResourceA
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
SystemTimeToFileTime
CreateEventA
GetThreadLocale
GetUserDefaultLCID
WriteFile
GlobalAlloc
SetThreadPriority

ole32

CoUninitialize
CoInitialize
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CreateBindCtx
CLSIDFromProgID
CoTaskMemAlloc
CoCreateInstance
CoCreateFreeThreadedMarshaler

shlwapi

ord117
ord56
ord136
ord60
ord116
PathFindExtensionW
ord2
PathFindFileNameW
ord52
UrlCanonicalizeW
ord44
ord28
ord311
ord310
PathIsURLW
StrCpyW
StrCatW
ord26
ord68
ord66
StrToIntW
StrCmpNIW
ord45
ord43
ord38
ord51
ord83
StrCmpW
ord80
ord115
UrlUnescapeW
PathSearchAndQualifyW
UrlCreateFromPathW
PathCreateFromUrlW
UrlIsW
UrlGetLocationW
ord25

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bc2c76c742fb19908505d33890e61674

Headers

File Characteristics

Imports

kernel32

ole32

shlwapi

Exports

Exports

Sections

.text Size: 772KB - Virtual size: 772KB

.data Size: 63KB - Virtual size: 65KB

.rsrc Size: 138KB - Virtual size: 138KB

.reloc Size: 49KB - Virtual size: 49KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 772KB - Virtual size: 772KB

.data
Size: 63KB - Virtual size: 65KB

.rsrc
Size: 138KB - Virtual size: 138KB

.reloc
Size: 49KB - Virtual size: 49KB

.rmnet
Size: 56KB - Virtual size: 60KB