59dac8873ec1f2d142a24f29f24a2e9c827633e786db99566b1b94eb38c75a18

Sharing

Copy URL

Twitter E-mail

General

Target

59dac8873ec1f2d142a24f29f24a2e9c827633e786db99566b1b94eb38c75a18
Size

14KB
MD5

00f0ba11e0c03e123142c66126304e2d
SHA1

dfd3132fb3cae2389a7801050b9b1c7ecccbc947
SHA256

59dac8873ec1f2d142a24f29f24a2e9c827633e786db99566b1b94eb38c75a18
SHA512

6cd996014a8554d3dbf0c5e3c532f332e6f221be74fb13813e8cd3ddf8f1fec16f79f45b15ceb97862b6c20f7042e54c64fdfa905abd716f74f78b0bb050cfe4
SSDEEP

384:WwMe1QydjkgrwqCnPV0GDWpu/1oXy5d5W:Wvjymlqot0GqpuuE

Score

N/A

Malware Config

Signatures

Files

59dac8873ec1f2d142a24f29f24a2e9c827633e786db99566b1b94eb38c75a18
.dll regsvr32 windows x86

8e51d26cdecbe0019fd32f2f173a6d90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_snprintf
malloc
free
memset
_initterm
strtok
srand
rand
sprintf
strncpy
atoi
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
tmpnam
fopen
fwrite
fclose
_stricmp

advapi32

GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo

ole32

CoCreateInstance
CoInitialize

user32

wsprintfA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA

shlwapi

SHSetValueA
SHGetValueA

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SHChangeNotify

kernel32

FreeLibrary
MoveFileExA
DeleteFileW
Sleep
GetModuleFileNameA
SleepEx
DisableThreadLibraryCalls
OutputDebugStringA
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetLocalTime
GetCurrentProcessId
GetSystemDirectoryA
GetProcAddress
CreateProcessA
WaitForSingleObject
CloseHandle
LoadLibraryA
DeleteFileA

wininet

InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetOpenA

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

netapi32

Netbios

psapi

EnumProcessModules
GetModuleBaseNameA
EnumProcesses

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e51d26cdecbe0019fd32f2f173a6d90

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

ole32

user32

shlwapi

shell32

kernel32

wininet

rpcrt4

netapi32

psapi

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 640B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 640B