a0fb091cd8ab04967222ade90db57bf4c983c55e6fb255932254e62c7ea45b94

Sharing

Copy URL Twitter E-mail

General

Target

a0fb091cd8ab04967222ade90db57bf4c983c55e6fb255932254e62c7ea45b94
Size

260KB
MD5

f87ad8ab2b26dd2a6eb6e104aa2eb800
SHA1

60bc122b0b98e9646a5352bd6ff53c2b4afc8bb4
SHA256

a0fb091cd8ab04967222ade90db57bf4c983c55e6fb255932254e62c7ea45b94
SHA512

470404a548fd05ef74d347242841798b62f6adff4d10b5566f2bf515e238ce21094d29be7ef098e06581b910615454aed37975393c0cdbc322f341b294a1ec76
SSDEEP

3072:oTHAaua0FXk7Tc9mGoNCEkkyLTHP3yGwHefj0XyEBBfyqF2cPZNo:za0FXUc9mvGkGTP3yFexKBqqF1Po

Score

N/A

Malware Config

Signatures

Files

a0fb091cd8ab04967222ade90db57bf4c983c55e6fb255932254e62c7ea45b94
.dll regsvr32 windows x86

0e2af8abb9fc494af8a46bef8f9c3763

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

CoInternetCompareUrl

kernel32

GetThreadLocale
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
MultiByteToWideChar
GetModuleFileNameA
GetLastError
WideCharToMultiByte
lstrlenW
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetModuleHandleA
lstrcatA
lstrcmpiW
CloseHandle
TerminateProcess
ExitProcess
GetLocaleInfoA
lstrcatW
lstrcpyW
GetVolumeInformationA
CreateProcessA
TerminateThread
WaitForSingleObject
CreateThread
SetFileTime
WriteFile
GetFileTime
CreateFileA
GetVersionExA
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
GetSystemInfo
GetACP
InterlockedExchange
FreeLibrary
LoadLibraryA
GetProcAddress
lstrlenA
lstrcpyA
Sleep
DisableThreadLibraryCalls
FlushFileBuffers
VirtualProtect
VirtualQuery
SetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
SetLastError
TlsFree
HeapSize
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
TlsSetValue
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
GetCurrentProcess

user32

SetTimer
CharNextA
GetSystemMetrics
LoadStringA
OpenIcon
GetScrollPos
IsZoomed
wsprintfA
KillTimer
wsprintfW

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteValueA
RegCreateKeyA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

oleaut32

VarUI4FromStr
DispCallFunc
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysStringLen
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VariantInit
VariantClear

shlwapi

PathFindExtensionA

comctl32

InitCommonControlsEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e2af8abb9fc494af8a46bef8f9c3763

Headers

File Characteristics

Imports

urlmon

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 152KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 8KB - Virtual size: 9.1MB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 36KB - Virtual size: 32KB

.text
Size: 156KB - Virtual size: 152KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 8KB - Virtual size: 9.1MB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 36KB - Virtual size: 32KB