a9408a749a86a8b1e980f01d4dcd507258726b5455a1389d07b402f2dc7f3af9

Sharing

Copy URL Twitter E-mail

General

Target

a9408a749a86a8b1e980f01d4dcd507258726b5455a1389d07b402f2dc7f3af9
Size

11KB
MD5

5e3d37c460e25baeb4a89916322f439a
SHA1

666809cc0febe124e5a219dd20222031ac462e71
SHA256

a9408a749a86a8b1e980f01d4dcd507258726b5455a1389d07b402f2dc7f3af9
SHA512

66163cfb7392e458e99fb870af36b3bd5f9491793e11f6fe98b1396942be620f35739695401117c2d7e71ca88b18b4621e0fa0f960ba65096d28a4ea3f8d8b1e
SSDEEP

192:hOmjhC98Vmqz7uS2t3XoPVT6eAjC2x3w:hrjC8Vm6R0YPVkC2

Score

N/A

Malware Config

Signatures

Files

a9408a749a86a8b1e980f01d4dcd507258726b5455a1389d07b402f2dc7f3af9
.dll regsvr32 windows x86

df1d2e1887146fd508ac45e53c58a0e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent

rpcrt4

IUnknown_AddRef_Proxy
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
NdrDllGetClassObject
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow

oleaut32

BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree

msvcr100

__dllonexit
_except_handler4_common
_onexit
_lock
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
memcmp
_malloc_crt
_initterm
_encoded_null
_crt_debugger_hook

mozglue

frex

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df1d2e1887146fd508ac45e53c58a0e1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

rpcrt4

oleaut32

msvcr100

mozglue

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.orpc Size: 512B - Virtual size: 135B

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 1024B - Virtual size: 692B

.text
Size: 2KB - Virtual size: 2KB

.orpc
Size: 512B - Virtual size: 135B

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 1024B - Virtual size: 692B