2c7ccacfb521657c97ed05c1e0177bed47805bd6f9f83c404ca2d399bf02c09c

Sharing

Copy URL Twitter E-mail

General

Target

2c7ccacfb521657c97ed05c1e0177bed47805bd6f9f83c404ca2d399bf02c09c
Size

52KB
MD5

342e0b71b4c7b77bf56cb8aa087ea420
SHA1

c6c123ec320dc418c366d97971e2b78e4f963fe6
SHA256

2c7ccacfb521657c97ed05c1e0177bed47805bd6f9f83c404ca2d399bf02c09c
SHA512

c592d9ec3b1f1a1675e55110b6559edffd77528331cfc92bb0a4cdbc067208b914fd25e81a61e1bcfdf46c1e67dd32f6fb361d4e7597a0c625b5f9b15f0570b8
SSDEEP

1536:vSSoDddEC9aTrQ4B9+3960Vn3cXq3IOb6CgrIUKb:B6l9orQ4B94yYuKb

Score

N/A

Malware Config

Signatures

Files

2c7ccacfb521657c97ed05c1e0177bed47805bd6f9f83c404ca2d399bf02c09c
.dll regsvr32 windows x86

61534ee917b688bf7954db846ad4ea21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
MoveFileA
InterlockedDecrement
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
Process32Next
Process32First
GetCurrentProcessId
GetCommandLineW
RemoveDirectoryA
Sleep
CreateThread
ExitProcess
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetProcAddress
LocalFree
LoadLibraryA
FreeLibrary
CreateDirectoryA
WritePrivateProfileStringA
FindFirstFileA
GetPrivateProfileStringA
SetFileAttributesA
FindNextFileA
DeleteFileA
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegDeleteKeyA
RegEnumKeyExA

shell32

SHGetSpecialFolderPathA
CommandLineToArgvW

ole32

CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoCreateInstance

oleaut32

VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString

msvcrt

ftell
_strlwr
_strupr
_adjust_fdiv
malloc
_initterm
free
strcmp
strncmp
strncpy
_wcslwr
wcsstr
strcpy
strchr
atoi
strlen
strstr
memset
strrchr
sprintf
strcat
_access
??3@YAXPAX@Z
fclose
fread
??2@YAPAXI@Z
_stricmp
fseek
fopen
memcpy
_purecall
memcmp

shlwapi

SHSetValueA
SHDeleteKeyA
SHDeleteValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61534ee917b688bf7954db846ad4ea21

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

idata Size: 4KB - Virtual size: 4B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

idata
Size: 4KB - Virtual size: 4B

.reloc
Size: 4KB - Virtual size: 2KB