09440ca11c091974fd0706cb2e6ba505070295607f70a289f2f7ba73d109211b

Sharing

Copy URL Twitter E-mail

General

Target

09440ca11c091974fd0706cb2e6ba505070295607f70a289f2f7ba73d109211b
Size

453KB
MD5

b530b9ff081a04d1be4a8ce6163f0077
SHA1

9bce8d263b15e0f907f5603ee35bf180e46af3a0
SHA256

09440ca11c091974fd0706cb2e6ba505070295607f70a289f2f7ba73d109211b
SHA512

6a27488a2320a220b916cbf4f6b0c42c5850efbd279202148e7531a1dff3ad2bbf7f5af094f683004ada239af25cded8a218674267fbcefe4bb0f94f5fdc31ec
SSDEEP

6144:95bzGzCESyfUG5Dl+/27P6APleGXgkOfNpMI/uF5WrV9xLFeXWL61EWmfAt7:9zmfUGtPjBOfNpaerVTpp61

Score

N/A

Malware Config

Signatures

Files

09440ca11c091974fd0706cb2e6ba505070295607f70a289f2f7ba73d109211b
.dll regsvr32 windows x86

77267099d2f8a7e40cac0fff1547ca98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

RaiseException
WaitForSingleObject
ReleaseMutex
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetModuleFileNameW
GetFileAttributesW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempPathW
CreateFileW
WriteFile
CreateMutexW
ExitThread
GetVolumeInformationW
Sleep
GetLocalTime
DeleteFileW
SetFileTime
GetLastError
GetFileSizeEx
ReadFile
MulDiv
EnterCriticalSection
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ReleaseSemaphore
RemoveDirectoryW
CreateProcessW
GetExitCodeProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GetExitCodeThread
TerminateThread
GetModuleHandleW
FindFirstFileW
FindClose
GetLocaleInfoW
CreateThread
OpenMutexW
SetThreadPriority
FindNextFileW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
HeapValidate
GetProcessHeap
LocalFileTimeToFileTime
CopyFileW
SetFileAttributesW
SystemTimeToFileTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetDiskFreeSpaceW
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetTickCount
LoadLibraryExW
lstrcmpiW
FreeLibrary
lstrlenW
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CloseHandle
CreateSemaphoreW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetHandleCount
GetConsoleMode
GetConsoleCP
CreateFileA
SetEndOfFile
GetDriveTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetFilePointer
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
GetFullPathNameW
GetTimeZoneInformation
GetModuleFileNameA
GetStdHandle
HeapCreate
VirtualAlloc
VirtualFree
ExitProcess
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetDriveTypeW
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
GetModuleHandleA

user32

CreateWindowExW
RegisterClassW
LoadCursorW
LoadIconW
UnregisterClassW
DefWindowProcW
PostMessageW
RegisterWindowMessageW
MessageBoxW
DestroyWindow
IsWindow
KillTimer
SetTimer
ShowWindow
CharNextW
UnregisterClassA

gdi32

GetStockObject

advapi32

RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

ole32

CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoInitialize

oleaut32

UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
VarUI4FromStr
SysFreeString
SysStringLen
SysAllocString

odbc32

ord136
ord13
ord4
ord16
ord111
ord9
ord141
ord107
ord75
ord24
ord31

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77267099d2f8a7e40cac0fff1547ca98

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

odbc32

Exports

Exports

Sections

.text Size: 269KB - Virtual size: 268KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 72KB - Virtual size: 80KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 23KB - Virtual size: 22KB

.text
Size: 269KB - Virtual size: 268KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 72KB - Virtual size: 80KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 23KB - Virtual size: 22KB