762f43a80712697cc9f9eecc1df05cf25307f06ff1416a63fd9f4c8c3d815fd8

Sharing

Copy URL Twitter E-mail

General

Target

762f43a80712697cc9f9eecc1df05cf25307f06ff1416a63fd9f4c8c3d815fd8
Size

84KB
MD5

ab3087aaf1aeb80a4a655936f5f3aece
SHA1

83047670c938ff9c8b68b7051a5af6d4884feaaf
SHA256

762f43a80712697cc9f9eecc1df05cf25307f06ff1416a63fd9f4c8c3d815fd8
SHA512

18a803bd0d67e9d463de348200cc53471ba5feeb4864dee3d714c2558fc7462d06c30c7a8786b2e375c823260cbf8f5d60a70619611a9d9e7478999a241f8f0a
SSDEEP

1536:ki+6w3BdVikOmARGel4SwfWUKHP7/noOgs9JQbN5PB4:kiCpi/tl47fWHboOgs4rPB4

Score

N/A

Malware Config

Signatures

Files

762f43a80712697cc9f9eecc1df05cf25307f06ff1416a63fd9f4c8c3d815fd8
.dll regsvr32 windows x86

5e339ebb2e2bc240545b5401f608512a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

log

?DOLOG@@YAXPB_WZZ

mfc80u

ord266
ord1908
ord265
ord764
ord3677
ord757
ord566
ord765
ord315
ord1079
ord1033
ord1087
ord1197
ord1199
ord1093
ord371
ord1162
ord1115
ord1192
ord1168
ord1170
ord1200
ord581
ord3327
ord4255
ord4475
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2832
ord2708
ord4301
ord2829
ord762
ord1178
ord2725
ord1182
ord314
ord1043
ord6751
ord2239
ord3824
ord4032
ord4008
ord6272
ord3795
ord6274
ord4320
ord2054
ord2009
ord5579
ord3800
ord1007
ord5096
ord6215
ord5378
ord3826
ord1911
ord2925
ord5220
ord5222
ord3942
ord4562
ord5226
ord5209
ord2531
ord5562

msvcr80

_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_initterm_e
_onexit
_lock
_encode_pointer
_amsg_exit
_adjust_fdiv
_vscwprintf
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
__clean_type_info_names_internal
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??1exception@std@@UAE@XZ
__CxxFrameHandler3
_decode_pointer
__dllonexit
_unlock
_except_handler4_common
_resetstkoflw
malloc
calloc
_recalloc
_purecall
free
memcpy_s
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
memset
vswprintf_s

kernel32

GetVersionExA
GetACP
HeapFree
HeapReAlloc
HeapSize
GetLocaleInfoA
HeapDestroy
GetProcessHeap
DeleteCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LocalFree
RaiseException
lstrlenW
OutputDebugStringW
GetFileAttributesW
GetProcAddress
GetLastError
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
GetThreadLocale
SetThreadLocale
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc

user32

UnregisterClassA

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoCreateInstance
CoLoadLibrary

oleaut32

LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString

atl80

ord15
ord18
ord31
ord58
ord32
ord30
ord61
ord23
ord64
ord22

msvcp80

?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e339ebb2e2bc240545b5401f608512a

Headers

File Characteristics

Imports

log

mfc80u

msvcr80

kernel32

user32

advapi32

ole32

oleaut32

atl80

msvcp80

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 8KB - Virtual size: 5KB