a2ab112c2dd7c9d448bfce0abf47302d00f78f5269719759ab8b9c757a3999bb

Sharing

Copy URL Twitter E-mail

General

Target

a2ab112c2dd7c9d448bfce0abf47302d00f78f5269719759ab8b9c757a3999bb
Size

52KB
MD5

ef8e9ff845d8ca5840f44d82bb031a70
SHA1

f8d17c7a19252ad0eac9b8c04901cdec4d4f9554
SHA256

a2ab112c2dd7c9d448bfce0abf47302d00f78f5269719759ab8b9c757a3999bb
SHA512

084c0a25e1ea3d9e28c920c89402e8f5b24c78b1e892b5c13d926a67976742c186799f2af403178bc9f6a2e11b4c7c5fa21fc88042794c06e264979da330c60a
SSDEEP

1536:XqhYUDIgNyNZ8V6a2pKXLXJlfPQoIeVjRzcHB:xUDIg0izbcofRzcHB

Score

N/A

Malware Config

Signatures

Files

a2ab112c2dd7c9d448bfce0abf47302d00f78f5269719759ab8b9c757a3999bb
.dll regsvr32 windows x86

28ee38ad13f186f52f0d545adaa68b98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
WideCharToMultiByte
GetCurrentProcessId
Process32Next
Process32First
FindNextFileA
DeleteFileA
GetPrivateProfileStringA
lstrlenW
LocalFree
SetFileAttributesA
MoveFileA
RemoveDirectoryA
ExitProcess
CreateDirectoryA
GetExitCodeProcess
WaitForSingleObject
GetCommandLineW
CreateThread
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
Sleep
FreeLibrary
CloseHandle
LoadLibraryA
WritePrivateProfileStringA
GetProcAddress
FindFirstFileA

advapi32

BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA

shell32

SHGetSpecialFolderPathA
CommandLineToArgvW

ole32

CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance

oleaut32

VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString

msvcrt

strchr
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
fopen
fseek
ftell
fread
fclose
strcmp
_access
strrchr
atoi
??3@YAXPAX@Z
sprintf
strstr
strlen
memset
strcat
strcpy
wcsstr
_wcslwr
strncpy
_strupr
strncmp
memcpy
_purecall
??2@YAPAXI@Z
memcmp

shlwapi

SHDeleteValueA
SHDeleteKeyA
SHSetValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28ee38ad13f186f52f0d545adaa68b98

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

idata Size: 4KB - Virtual size: 4B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

idata
Size: 4KB - Virtual size: 4B

.reloc
Size: 4KB - Virtual size: 2KB