2fd5e556a909f94ffb1e21de67e950dba6e3e8e1a7f64b121ae412166044900b

Sharing

Copy URL

Twitter E-mail

General

Target

2fd5e556a909f94ffb1e21de67e950dba6e3e8e1a7f64b121ae412166044900b
Size

1.2MB
MD5

ea2e2c6aa1f5cd7746c9eaafaf0d62f3
SHA1

81bac30327b2dd0ae5006b30b47940724431da31
SHA256

2fd5e556a909f94ffb1e21de67e950dba6e3e8e1a7f64b121ae412166044900b
SHA512

b5299406fe7608323fb18484879b38c6fdbbc2be6383acf4c146f9ffe1fce8accdcb8f2bce6d9adf92f9b8f3152390e284a16886af4e6d01bc10f57cbb78972b
SSDEEP

24576:avwTp/SfNAtwvazXyhZpwSNJH2/y4bYiJDZwchNIW2rdJxleqSi4vLTMm9LiDWyc:aSopPq9mw27a5tRdsUiE1Ll5

Score

N/A

Malware Config

Signatures

Files

2fd5e556a909f94ffb1e21de67e950dba6e3e8e1a7f64b121ae412166044900b
.dll regsvr32 windows x86

d866aacd968e23d69b89243ad5faf65c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CLSIDFromProgID
CoCreateFreeThreadedMarshaler
CreateBindCtx
StringFromCLSID
CoCreateGuid
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance

shlwapi

ord44
ord45
ord28
ord311
ord310
StrCpyW
StrCatW
ord158
ord156
PathIsURLW
PathSearchAndQualifyW
UrlCreateFromPathW
UrlUnescapeW
PathCreateFromUrlW
UrlCanonicalizeW
PathIsRelativeW
UrlIsW
UrlGetLocationW
ord15
ord66
ord29
ord38
StrToIntW
StrCmpNIW
StrCmpNW
StrCmpW
ord52
ord115

kernel32

GetThreadContext
LocalAlloc
ReadFile
SetEndOfFile
FlushFileBuffers
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
RtlUnwind
VirtualProtect
GetCommandLineA
GetCPInfo
TlsGetValue
GetProcAddress
LoadLibraryA
FreeLibrary
MultiByteToWideChar
ExpandEnvironmentStringsA
lstrcpyA
GetModuleFileNameA
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
TlsSetValue
CloseHandle
HeapAlloc
GetCurrentThreadId
DuplicateHandle
GetCurrentThread
GetCurrentProcess
HeapFree
GetModuleHandleA
GetVersionExA
TlsAlloc
TlsFree
HeapSize
HeapReAlloc
VirtualFree
VirtualAlloc
GetProcessHeap
DeleteCriticalSection
WaitForSingleObject
GetTickCount
ReleaseSemaphore
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateSemaphoreA
CreateEventA
Sleep
VirtualQuery
ResumeThread
SuspendThread
SetEvent
ResetEvent
DebugBreak
HeapDestroy
GetLastError
HeapCreate
GetSystemInfo
SetLastError
RaiseException
WideCharToMultiByte
LoadResource
LoadLibraryExA
FormatMessageA
FormatMessageW
FindClose
FindNextFileA
FindFirstFileA
GetUserDefaultLCID
GetSystemDefaultLCID
GetSystemDefaultLangID
LoadLibraryW
FileTimeToSystemTime
SystemTimeToFileTime
GetVersionExW
GetThreadLocale
GetTimeFormatW
GetDateFormatW
GetModuleHandleW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1006KB - Virtual size: 1006KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d866aacd968e23d69b89243ad5faf65c

Headers

File Characteristics

Imports

ole32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 1006KB - Virtual size: 1006KB

.data Size: 66KB - Virtual size: 68KB

.rsrc Size: 119KB - Virtual size: 119KB

.reloc Size: 63KB - Virtual size: 63KB

.text
Size: 1006KB - Virtual size: 1006KB

.data
Size: 66KB - Virtual size: 68KB

.rsrc
Size: 119KB - Virtual size: 119KB

.reloc
Size: 63KB - Virtual size: 63KB