f2be9b0dde1a301f3e331d67173b925184b04b370baaac0372709b6204bc95a1

Sharing

Copy URL Twitter E-mail

General

Target

f2be9b0dde1a301f3e331d67173b925184b04b370baaac0372709b6204bc95a1
Size

194KB
MD5

628c46e9d00696bb3e7a2aa30467c030
SHA1

b09f83c38029007abd9e4cd9ae760cd93fbaa9f3
SHA256

f2be9b0dde1a301f3e331d67173b925184b04b370baaac0372709b6204bc95a1
SHA512

635d873bae45a8f3c74cfac076a0f012bcbb801e2eed5e66f518f8391393fb7a9bb20a93c705e2a5e0c5c634a0a09485e2846a9c5e622ab70dd56610f774ea7a
SSDEEP

6144:pVT/he22rmXyX41qZXnuS2wYApvUcg7x7rQ:pVT/w22rmXyX41qkS2wW

Score

N/A

Malware Config

Signatures

Files

f2be9b0dde1a301f3e331d67173b925184b04b370baaac0372709b6204bc95a1
.dll regsvr32 windows x86

cd56aebbee13670c821ba176db5fa49f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_CxxThrowException
free
_purecall
__CxxFrameHandler
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
wcsrchr
_wcsupr
_wtol
wcsncmp
wcstol
_ltow
_callnewh
_initterm
_except_handler3
_onexit
_wcsicmp
_ultow
wcsncpy
wcscmp
wcscpy
wcslen
??0exception@@QAE@ABV0@@Z

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?nothrow@std@@3Unothrow_t@1@B
??0bad_alloc@std@@QAE@ABV01@@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@PBD@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z

atl

ord15
ord30
ord58
ord32
ord20
ord16
ord21
ord23
ord17

iassvcs

IASVariantChangeType

rtutils

TraceVprintfExA
TraceRegisterExW
TraceDeregisterW

netapi32

NetShareDel

oleaut32

VariantClear
SysFreeString
SysAllocString
LoadRegTypeLi
SysStringLen
SafeArrayCreate
VariantInit
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
GetErrorInfo
VariantCopy

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CLSIDFromProgID
CoRevertToSelf
CoImpersonateClient
CoUninitialize
CoInitializeSecurity

advapi32

CloseServiceHandle
RegisterServiceCtrlHandlerW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
DeleteService
OpenServiceW
OpenSCManagerW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
SetServiceStatus

rpcrt4

UuidCreate
RpcStringFreeW
UuidToStringW

user32

wsprintfA

kernel32

lstrlenW
EnterCriticalSection
LeaveCriticalSection
VirtualQuery
InterlockedExchange
Sleep
FormatMessageA
lstrcpynW
lstrcatW
lstrcpyW
lstrcmpiW
SetLastError
CreateEventA
WaitForSingleObject
CloseHandle
CreateDirectoryW
GetEnvironmentVariableW
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
SetEvent
GetModuleFileNameW
GetLastError
lstrcmpW
SwitchToThread
TryEnterCriticalSection
LocalFree
DeleteFileW
CopyFileW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
RemoveDirectoryW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd56aebbee13670c821ba176db5fa49f

Headers

File Characteristics

Imports

msvcrt

msvcp60

atl

iassvcs

rtutils

netapi32

oleaut32

ole32

advapi32

rpcrt4

user32

kernel32

Exports

Exports

Sections

.text Size: 126KB - Virtual size: 125KB

.data Size: 57KB - Virtual size: 56KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 126KB - Virtual size: 125KB

.data
Size: 57KB - Virtual size: 56KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 7KB