af5aec3f875f46331f6d3d23a3f3483cdce2978cc5390f01480eec4411387506

Sharing

Copy URL

Twitter E-mail

General

Target

af5aec3f875f46331f6d3d23a3f3483cdce2978cc5390f01480eec4411387506
Size

273KB
MD5

7b614043b53a7eeca6b808ea29b238ac
SHA1

2c5eff86e0f05f026a675c092d1f98908347dcdd
SHA256

af5aec3f875f46331f6d3d23a3f3483cdce2978cc5390f01480eec4411387506
SHA512

5587ddc56ff275975a70c6013251f3b65b62283242637eb3ec1461f50d80bbeaa4736adcbb07351c69fbc768799487a64d5690d1c2dd81eb0d7f216f8380a5f2
SSDEEP

6144:xfo5rJAq8n8yIqESGEra2Q1Rdr+p5SbXV1xvL2XaoOM:6J+qYIlSIV1R4zIfigM

Score

N/A

Malware Config

Signatures

Files

af5aec3f875f46331f6d3d23a3f3483cdce2978cc5390f01480eec4411387506
.dll regsvr32 windows x86

1c43af31598ff2e7e3dc1c619453e230

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msoert2

CreateStreamOnHFile
HrCopyStream
FIsEmptyA
PszDupA
HrByteToStream
UlStripWhitespace
PszToUnicode
StrTokEx

ole32

CLSIDFromString
CoCreateInstance
CoTaskMemRealloc
CoGetMalloc

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
CryptAcquireContextA
RegEnumKeyExA

gdi32

DeleteObject

kernel32

VirtualProtect
LoadLibraryA
lstrcpynA
lstrlenA
ExpandEnvironmentStringsA
FreeLibrary
GetProcAddress
FindClose
FindFirstFileA
UnmapViewOfFile
lstrcmpA
MapViewOfFile
CloseHandle
CreateFileMappingA
GetFileSize
CreateFileA
GetPrivateProfileStringA
GetProfileStringA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
WideCharToMultiByte
SetLastError
GetModuleFileNameA
GetSystemInfo
GetEnvironmentVariableA
GetLastError
GetFileAttributesA
GetTimeZoneInformation
FindNextFileA
ReadFile
TlsSetValue
GetCommandLineA
ExitProcess
GetModuleHandleA
TlsFree
TlsGetValue
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualQuery
HeapCreate
VirtualFree
WriteFile
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind
InterlockedExchange
HeapDestroy

user32

CreateDialogParamA
EndDialog
SetCursor
LoadCursorA
SendDlgItemMessageA
DialogBoxParamA
LoadBitmapA
GetSystemMetrics
GetWindowRect
MessageBoxA
GetWindowLongA
SetFocus
GetParent
GetWindowTextA
SetDlgItemTextA
GetDlgItemTextA
CharPrevA
DestroyWindow
SendMessageA
LoadStringA
KillTimer
SetWindowLongA
PeekMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
SetWindowTextA
ShowWindow
SetTimer
PostMessageA
EnableWindow

comctl32

ImageList_AddMasked
CreatePropertySheetPageA
PropertySheetA
DestroyPropertySheetPage
InitCommonControlsEx
ImageList_Create

shlwapi

SHGetValueA
StrCmpNIA
StrStrIA
PathRemoveFileSpecA
StrCatBuffA
wnsprintfA
PathRemoveExtensionA
PathFileExistsA
PathAddBackslashA
SHSetValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExportMessages
PerformImport
PerformMigration

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c43af31598ff2e7e3dc1c619453e230

Headers

File Characteristics

Imports

msoert2

ole32

advapi32

gdi32

kernel32

user32

comctl32

shlwapi

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 83KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 176KB - Virtual size: 175KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 84KB - Virtual size: 83KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 176KB - Virtual size: 175KB

.reloc
Size: 8KB - Virtual size: 8KB