48d278b79ff5bdd5b1d2ee840bb5eab21bce1200efe05ef91bd6dde4e4f97f13

Sharing

Copy URL Twitter E-mail

General

Target

48d278b79ff5bdd5b1d2ee840bb5eab21bce1200efe05ef91bd6dde4e4f97f13
Size

367KB
MD5

a4ef75953a0d6b559bef302382c11090
SHA1

828219903ecf7a554494a99ed4cfc10b59d7e9f7
SHA256

48d278b79ff5bdd5b1d2ee840bb5eab21bce1200efe05ef91bd6dde4e4f97f13
SHA512

d639e90aa7c31b5f1f793a5ef57459755386e356d72a366cfb762bc4872c953a66f84cc1f513e3bb6fa87ffda41f59fa5aa8d455afb0c48c1ff8099eb521094f
SSDEEP

6144:IZc2x2U6uIkTeBVlxYGr0qFtLxYxuhUlttXQIuOLv2d0EeByYCL2VBlcA7Vq:IZrX6tkqliGr0qFtzS3uOL+d0YeBlm

Score

N/A

Malware Config

Signatures

Files

48d278b79ff5bdd5b1d2ee840bb5eab21bce1200efe05ef91bd6dde4e4f97f13
.dll regsvr32 windows x86

6e43dd50ce21fc52aa2cec80f9d0f93a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wcsrev
wcslen
_wcsnicmp
??2@YAPAXI@Z
wcsstr
wcstok
iswspace
_wcslwr
wcschr
wcspbrk
wcsrchr
memmove
wcsncpy
wcscpy
_itow
iswupper
_wcsupr
wcsncmp
_adjust_fdiv
_initterm
qsort
??3@YAXPAX@Z
free
realloc
malloc
wcstoul
wcscat
iswdigit
_wcsicmp
time
srand
rand
_wtoi
_purecall

oleaut32

VariantClear
VariantChangeTypeEx
VariantInit
VariantCopy
SysAllocString
SysFreeString
SysStringLen
SysAllocStringLen
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
LoadRegTypeLi
SetErrorInfo
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
VarI4FromStr

ole32

CoTaskMemRealloc
CoTaskMemAlloc
OleRegGetUserType
StringFromCLSID
CoTaskMemFree
CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateInstance

kernel32

GetCurrentProcess
HeapDestroy
DisableThreadLibraryCalls
FreeLibrary
SizeofResource
LoadResource
GetVersionExA
FindResourceA
FindResourceW
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryExA
LoadLibraryExW
lstrcmpiA
lstrcmpiW
lstrcmpA
lstrcmpW
lstrcpynW
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetLastError
MultiByteToWideChar
GlobalSize
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetLastError

gdi32

CreatePatternBrush
DeleteObject
SelectObject
SetWindowOrgEx
PatBlt

user32

SetRect
InvalidateRect
InflateRect
SetCursor
GetKeyState
ReleaseDC
GetDC
PtInRect
GetClientRect
ScreenToClient
SetFocus
IsWindow
GetParent
GetWindowLongA
GetWindowLongW
IsCharAlphaNumericA
IsCharAlphaNumericW
IsCharAlphaA
IsCharAlphaW
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
LoadStringA
LoadStringW
CharNextW

advapi32

RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 218KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e43dd50ce21fc52aa2cec80f9d0f93a

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

oleaut32

ole32

kernel32

gdi32

user32

advapi32

Exports

Exports

Sections

.text Size: 123KB - Virtual size: 122KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 7KB - Virtual size: 7KB

.text Size: 218KB - Virtual size: 220KB

.text
Size: 123KB - Virtual size: 122KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 7KB - Virtual size: 7KB

.text
Size: 218KB - Virtual size: 220KB