378d37567b488b96fba4b0ba5ece5da003c03bb099ab93386257b6bcbafd90d2

Sharing

Copy URL Twitter E-mail

General

Target

378d37567b488b96fba4b0ba5ece5da003c03bb099ab93386257b6bcbafd90d2
Size

52KB
MD5

54e08d8f9a18c827193bb0fc0856b3e0
SHA1

c1c88a39496859ba5fd4a543d5485967ec3c3cc2
SHA256

378d37567b488b96fba4b0ba5ece5da003c03bb099ab93386257b6bcbafd90d2
SHA512

a56043d4e43bcbc71a9a225e71af37bcbf2b9aadbf1211cc473a63231037e4e64fa47259c24789dfb02d78127ae0aaa26cf0463e2501ad865bbbca0273309fea
SSDEEP

1536:y1z9Z0IrOwM+xjInUNqZKw/NWMjH1MoGIONV:yXZ0/0MNnRwIu

Score

N/A

Malware Config

Signatures

Files

378d37567b488b96fba4b0ba5ece5da003c03bb099ab93386257b6bcbafd90d2
.dll regsvr32 windows x86

98c420d489122426e1b9ddefd6703fb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetShortPathNameA
GetModuleHandleA
FindNextFileA
DeleteFileA
GetPrivateProfileStringA
FindFirstFileA
GetCurrentProcessId
RemoveDirectoryA
LocalFree
SetFileAttributesA
WideCharToMultiByte
FreeLibrary
MultiByteToWideChar
MoveFileA
CreateDirectoryA
Process32Next
Process32First
CreateThread
GetCommandLineW
WritePrivateProfileStringA
ExitProcess
lstrlenW
HeapDestroy
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
GetExitCodeProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
Sleep

advapi32

GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
BuildExplicitAccessWithNameA

shell32

SHGetSpecialFolderPathA
CommandLineToArgvW

ole32

CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString

msvcrt

strstr
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
fopen
fseek
ftell
fread
fclose
??3@YAXPAX@Z
sprintf
memset
strlen
memcpy
_purecall
??2@YAPAXI@Z
memcmp
strcmp
strrchr
_stricmp
strcat
strcpy
_access
wcsstr
_wcslwr

shlwapi

SHSetValueA
SHDeleteValueA
SHDeleteKeyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98c420d489122426e1b9ddefd6703fb4

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

idata Size: 4KB - Virtual size: 4B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

idata
Size: 4KB - Virtual size: 4B

.reloc
Size: 4KB - Virtual size: 2KB