d8a65e29e81541cf50fe60f7e3f802163e9035b39bb1b215ebcfc6ab049209c6

Sharing

Copy URL Twitter E-mail

General

Target

d8a65e29e81541cf50fe60f7e3f802163e9035b39bb1b215ebcfc6ab049209c6
Size

88KB
MD5

175462cced699692af2df5b1560b2a8d
SHA1

a25d5c865df9da05662467e214d84d154227a316
SHA256

d8a65e29e81541cf50fe60f7e3f802163e9035b39bb1b215ebcfc6ab049209c6
SHA512

4b64c0355c7a871919c771b40b6217896cf22bf747a6abaf2f2ba582921b115843fa4445c24915e70e95321a714e4e7e75ae419cebd35e53616df35cd55b4955
SSDEEP

1536:JYWmdZHKOMAc/gTSykQA8CwZKvl4JsXAo:JhmdZHXMAmr8/Z0l4Jpo

Score

N/A

Malware Config

Signatures

Files

d8a65e29e81541cf50fe60f7e3f802163e9035b39bb1b215ebcfc6ab049209c6
.dll regsvr32 windows x86

ef53fe797f19a32a694955b01ea00634

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetStringTypeW
GetStringTypeA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
lstrcatA
GetFileType
lstrcpyA
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
SetFilePointer
GetStdHandle
SetHandleCount
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
TerminateProcess
RtlUnwind
ExitProcess
VirtualAlloc
lstrlenW
WideCharToMultiByte
lstrlenA
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
GetSystemInfo
HeapAlloc
DisableThreadLibraryCalls
GetCurrentProcess
SetPriorityClass
CreateFileA
CloseHandle
DeviceIoControl
GetStartupInfoA
GetVersionExA
VirtualFree
HeapDestroy
HeapFree
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA

user32

CallWindowProcA
DefWindowProcA
SetFocus
IsChild
GetFocus
GetWindowRect
SetWindowPos
BeginPaint
GetClientRect
EndPaint
InvalidateRect
IntersectRect
FillRect
OffsetRect
SetWindowRgn
IsWindow
GetParent
DestroyWindow
EqualRect
GetWindowLongA
SetWindowLongA
GetClassInfoExA
RegisterClassExA
CreateWindowExA
ShowWindow
UnionRect
PtInRect
GetKeyState
DrawTextA

gdi32

SetWindowOrgEx
GetDeviceCaps
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
CreateMetaFileA
SaveDC
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
SetTextColor
CreateSolidBrush
DeleteObject

ole32

OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
CreateOleAdviseHolder

oleaut32

SysReAllocString
OleCreatePropertyFrame
SysStringLen
LoadRegTypeLi
VariantClear
SysAllocString
OleTranslateColor
SysFreeString

atl

ord27
ord31
ord58
ord44
ord43
ord50
ord53
ord52
ord51
ord46
ord30
ord32
ord16
ord57
ord18
ord15
ord21
ord23
ord26

netapi32

Netbios

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef53fe797f19a32a694955b01ea00634

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

atl

netapi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 5KB