270c8914325678b1a03a799c33c37ba14a71ac66a41bb8e0eeb91897fd7c15fe

Sharing

Copy URL Twitter E-mail

General

Target

270c8914325678b1a03a799c33c37ba14a71ac66a41bb8e0eeb91897fd7c15fe
Size

380KB
MD5

c798d49ad8472b571474bace05d6944a
SHA1

f0d4ea68659f4005f1456a44c01690f0effe5760
SHA256

270c8914325678b1a03a799c33c37ba14a71ac66a41bb8e0eeb91897fd7c15fe
SHA512

086e155a52176384b610acf16350530a3050bef60478f781a11e224d66e85e85c1a6b43135ec2c3dd2fb944173258076899354acfd1489eebfa798087e65a08c
SSDEEP

3072:7rJ2Miokl+TI4u38zAuNfgrDy7JTjsvi2UV70tdevWAg0FuQPZy7358t5jx:/1gCK9qfgrDyJ/svjUViAOL8D

Score

N/A

Malware Config

Signatures

Files

270c8914325678b1a03a799c33c37ba14a71ac66a41bb8e0eeb91897fd7c15fe
.dll regsvr32 windows x86

41d042b847ecb06ed1b92806b0dc5e47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
lstrlenA
SetThreadLocale
GetThreadLocale
GetProcAddress
LoadLibraryW
GetVersionExA
LeaveCriticalSection
GetACP
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
CreateFileA
EnterCriticalSection
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
FreeLibrary
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetModuleFileNameW
GetLastError
CopyFileW
InterlockedExchange
lstrlenW
ReadFile
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
LoadLibraryA
RtlUnwind
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
GetModuleHandleA
VirtualFree
VirtualAlloc
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileW

user32

UnregisterClassA
CharNextW

advapi32

RegCreateKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegQueryValueExW
RegCloseKey
SetNamedSecurityInfoW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc

shell32

SHGetFolderPathW
SHCreateDirectoryExW

oleaut32

UnRegisterTypeLi
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
SysFreeString
RegisterTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41d042b847ecb06ed1b92806b0dc5e47

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 248KB - Virtual size: 247KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 24KB - Virtual size: 27KB

.rsrc Size: 20KB - Virtual size: 16KB

.reloc Size: 20KB - Virtual size: 17KB

.text
Size: 248KB - Virtual size: 247KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 24KB - Virtual size: 27KB

.rsrc
Size: 20KB - Virtual size: 16KB

.reloc
Size: 20KB - Virtual size: 17KB