175342a2db1c2a00081309485e6ef33bed0c3011e443ffb514d71b4f108204ab

Sharing

Copy URL Twitter E-mail

General

Target

175342a2db1c2a00081309485e6ef33bed0c3011e443ffb514d71b4f108204ab
Size

40KB
MD5

8fc815089f78c078eac64fa976c6ec98
SHA1

0664afffd5b02d5aff6ef3cf637278beed7f1113
SHA256

175342a2db1c2a00081309485e6ef33bed0c3011e443ffb514d71b4f108204ab
SHA512

f92d3b16a5bd267660510e9687ee7cb74bb1fa820661ae0174181d8b36cd63b22eabe76aa9e74995d827424f74fa3f8a30955d622cbabec7166037dd4dc3bff2
SSDEEP

384:IY8A332MVPLyHZC70pZdOK2RyhBTCVel5F/x7Rp9RZIuhxcBvfUU:IYDPLyHZC70diRyqelThjHcBnZ

Score

N/A

Malware Config

Signatures

Files

175342a2db1c2a00081309485e6ef33bed0c3011e443ffb514d71b4f108204ab
.dll regsvr32 windows x86

5a593105686359e01c8e4af0a3ccb3f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
MultiByteToWideChar
lstrlenA
HeapCreate
GetVersionExA
GetShortPathNameA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
GetModuleHandleA
FindResourceA
LoadResource
GetSystemInfo
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
DebugBreak
HeapAlloc
HeapFree
DisableThreadLibraryCalls
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryExA
GetLastError
HeapReAlloc

user32

CharNextA

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VarUI4FromStr
SysFreeString
SysStringLen
SysAllocString
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi

topo60

ord2
ord38
ord21
ord22
ord7
ord16
ord20
ord4

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 713B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a593105686359e01c8e4af0a3ccb3f8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

topo60

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 713B

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 962B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 713B

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 962B