bb98d0c97704160b15ab50a1046e2f11e3765ffbbf68049f36c90b67f82e7719

Sharing

Copy URL

Twitter E-mail

General

Target

bb98d0c97704160b15ab50a1046e2f11e3765ffbbf68049f36c90b67f82e7719
Size

196KB
MD5

31a18c8078af716ec4ca889890eceb7d
SHA1

93337a9e130684f55240651be5869e5fd99ba17f
SHA256

bb98d0c97704160b15ab50a1046e2f11e3765ffbbf68049f36c90b67f82e7719
SHA512

456f8267ca097f6306e0289b313383c9d0976073b53d47714fe766d983c369e68e080a862487ca0a65d574752fdf757b3267457b877eeaec477815d5e3ba5ec9
SSDEEP

3072:/mMPtnODbUdIMn5EDzX1lH70V/5VhKzT9sVAlNCOfn9eEFRbYnMU:OMPYQ52XH70V/5VwLNTnYn

Score

N/A

Malware Config

Signatures

Files

bb98d0c97704160b15ab50a1046e2f11e3765ffbbf68049f36c90b67f82e7719
.dll regsvr32 windows x86

02cbbb27a711b8d5d2f6ed59c609ae93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCrackUrlA
InternetGetConnectedState

dnsapi

DnsRecordListFree
DnsQuery_A

kernel32

lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrlenA
lstrcmpiA
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
GetThreadLocale
FindResourceA
LoadLibraryExA
WideCharToMultiByte
LockResource
FindResourceExA
GetLocaleInfoA
GetACP
InterlockedExchange
MultiByteToWideChar
GetModuleHandleA
GetVersionExA
LoadResource
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetStringTypeW
GetStringTypeA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
IsBadWritePtr
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
GetStartupInfoA

user32

CharNextA

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA

shell32

SHGetFileInfoA

ole32

StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance

oleaut32

SysStringLen
LoadRegTypeLi
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02cbbb27a711b8d5d2f6ed59c609ae93

Headers

File Characteristics

Imports

wininet

dnsapi

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 108KB - Virtual size: 104KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 108KB - Virtual size: 104KB

.reloc
Size: 8KB - Virtual size: 6KB