18282b34fb232d5f23e065905deb9a42aae1265b505c274e08e56fcbc3d4ca6f

Sharing

Copy URL Twitter E-mail

General

Target

18282b34fb232d5f23e065905deb9a42aae1265b505c274e08e56fcbc3d4ca6f
Size

268KB
MD5

2c3011b98ff4dad7968d418280ae87c0
SHA1

bd04cafe989ce8647be21925d4d5a77cdaf7782e
SHA256

18282b34fb232d5f23e065905deb9a42aae1265b505c274e08e56fcbc3d4ca6f
SHA512

ee5e26ac71ae4ab07da7c034a850f0d3133727c0a9018261993eedf5e8e207865a5fb9f17ab1499a702ea29d09303c4438a44f6522785526675d1ead18d11a32
SSDEEP

6144:aBms8X402bCPU6HBuY7rJIIV0SZsEOtlz1X9fGmTZEegnwF5J:0ms8XD2ApBu2JIg0SZsEozLfjTZEeKa5

Score

N/A

Malware Config

Signatures

Files

18282b34fb232d5f23e065905deb9a42aae1265b505c274e08e56fcbc3d4ca6f
.dll regsvr32 windows x86

565da0498a3e85f6206a1133c8e892b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GetVersionExA
CreateFileA
LocalAlloc
InterlockedExchange
RaiseException
GetFileSize
SetFilePointer
ReadFile
DisableThreadLibraryCalls
FindClose
lstrcpyA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
SizeofResource
SetLastError
WaitForSingleObject
CreateEventA
CreateThread
SetThreadPriority
CloseHandle
SetEvent
GetCurrentProcess
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetCurrentThreadId
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
LoadResource
LockResource

gdi32

SelectObject
SaveDC
SetTextColor
GetObjectA
CreateFontIndirectA
RestoreDC
DeleteObject
GetDeviceCaps

user32

CallNextHookEx
GetFocus
IsChild
SetFocus
UnhookWindowsHookEx
SendMessageA
GetDC
UnregisterClassA
SetWindowsHookExA
GetKeyState
PeekMessageA
TranslateMessage
GetWindowTextA
SetWindowTextA
SetRect
GetMessagePos
MoveWindow
MessageBeep
GetParent
CreateWindowExA
GetWindow
MapDialogRect
SetWindowContextHelpId
SendDlgItemMessageA
DestroyWindow
CallWindowProcA
DefWindowProcA
WinHelpA
IsIconic
ShowWindow
BringWindowToTop
PostQuitMessage
EnumChildWindows
CreateDialogParamA
EnableWindow
IsDlgButtonChecked
CheckDlgButton
LoadBitmapA
EndDialog
GetWindowLongA
PostMessageA
SetForegroundWindow
IsDialogMessageA
GetDlgItem
GetWindowRect
SetWindowPos
SetWindowLongA
GetSysColor
LoadCursorA
SetCursor
IsWindowUnicode
GetClientRect
ChildWindowFromPoint
DispatchMessageA

advapi32

RegEnumKeyA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

oleaut32

SysStringLen
SysAllocStringLen
VariantInit
VariantClear
SysAllocString
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SetErrorInfo
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VarBstrCat
SysFreeString

ole32

CLSIDFromString
CoTaskMemFree
StringFromGUID2
CreateStreamOnHGlobal
CoCreateInstance

wininet

DeleteUrlCacheEntryW
DeleteUrlCacheEntryA

atl70

ord23
ord61
ord15
ord46
ord30
ord49
ord64
ord22
ord18
ord48
ord60
ord38
ord40
ord42
ord44
ord43
ord31
ord58
ord10
ord11
ord32

msvcr70

wcscat
swprintf
wcstoul
wcsncat
_wtoi
malloc
realloc
free
memmove
wcschr
_purecall
_ltow
_itow
_wcsicmp
wcslen
wcsncpy
??2@YAPAXI@Z
??_U@YAPAXI@Z
wcscpy
_wcsnicmp
memset
wcscmp
??_V@YAXPAX@Z
??3@YAXPAX@Z
_wsplitpath
_except_handler3
_wmakepath
mbstowcs
_itoa
strtol
_wtol
_ltoa
wcstombs
wcsncmp
wcsrchr
_initterm
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

565da0498a3e85f6206a1133c8e892b1

Headers

File Characteristics

Imports

kernel32

gdi32

user32

advapi32

oleaut32

ole32

wininet

atl70

msvcr70

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 171KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 12KB - Virtual size: 11KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 172KB - Virtual size: 171KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 12KB - Virtual size: 11KB

.rmnet
Size: 60KB - Virtual size: 60KB