afdc05d3466c8be602d4806ebaba5ebedf05ca7f97a43b04dcfbed83c54ae842

Sharing

Copy URL Twitter E-mail

General

Target

afdc05d3466c8be602d4806ebaba5ebedf05ca7f97a43b04dcfbed83c54ae842
Size

64KB
MD5

4b9accd0120f03ef6831e2b0b638c24d
SHA1

1533ea53fae7805ed70f8ec164a6e408335ad779
SHA256

afdc05d3466c8be602d4806ebaba5ebedf05ca7f97a43b04dcfbed83c54ae842
SHA512

903d4e8a9e0b631ba49f9ea14ad22d9c66c9287fa6960c9f4b1cbcc6aef1acb9d55fe69a3d23bd0845b07ddb8ddf9a8a30ffb189ce77ddd8a2308e76de267a6b
SSDEEP

1536:+PO5VEAoim4Jl3RNp8LO18HiOqP7hskAZ5O:pEYP/1ei3PVskA3O

Score

N/A

Malware Config

Signatures

Files

afdc05d3466c8be602d4806ebaba5ebedf05ca7f97a43b04dcfbed83c54ae842
.dll regsvr32 windows x86

ad545fc5adf2795ec0f95ee04ab9924d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
WideCharToMultiByte
GetExitCodeProcess
WaitForSingleObject
Process32Next
Process32First
Sleep
LeaveCriticalSection
EnterCriticalSection
LocalFree
RemoveDirectoryA
GetCurrentProcessId
MoveFileA
GetCommandLineW
FreeLibrary
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetShortPathNameA
GetModuleHandleA
CreateDirectoryA
ExitProcess
CreateThread
LoadLibraryA
GetProcAddress
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
DeleteFileA
FindNextFileA
lstrlenA
MultiByteToWideChar
WritePrivateProfileStringA
GetSystemDirectoryA
CreateProcessA
GetModuleFileNameA
CloseHandle

advapi32

GetNamedSecurityInfoA
RegSetValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathA
CommandLineToArgvW

ole32

CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CoMarshalInterThreadInterfaceInStream

oleaut32

SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString

msvcrt

memcpy
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
_purecall
strcmp
??2@YAPAXI@Z
_wcslwr
memset
strlen
sprintf
??3@YAXPAX@Z
strstr
strrchr
strcat
_access
strcpy
memcmp
_stricmp
atoi
strchr
strncpy
strncmp
wcsstr

shlwapi

SHDeleteValueA
SHSetValueA
SHDeleteKeyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad545fc5adf2795ec0f95ee04ab9924d

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

mdata Size: 4KB - Virtual size: 4B

bdata Size: 4KB - Virtual size: 4B

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

mdata
Size: 4KB - Virtual size: 4B

bdata
Size: 4KB - Virtual size: 4B

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 2KB