299a0b8b1fd50c54cf5ef054af0078dd717e0e019c6386ad2cc6a0b795cbbf7f

Sharing

Copy URL Twitter E-mail

General

Target

299a0b8b1fd50c54cf5ef054af0078dd717e0e019c6386ad2cc6a0b795cbbf7f
Size

69KB
MD5

86a2e4e2d6a279e380fdce9ac87ae079
SHA1

a1269ea2aa9bd931568788ab1b5d3e29d24662e9
SHA256

299a0b8b1fd50c54cf5ef054af0078dd717e0e019c6386ad2cc6a0b795cbbf7f
SHA512

1b7a6b7280dd1f9b0cfd9b5a1c93e9d1075452be4d6708d5c33a317107e7104b94aec16f8141bd99b4f2a4d88e7f85c1ab687a04718b3e9afa395c859dd23dd0
SSDEEP

768:AWu8JNHZC9OqlDRsH57529QT7Z2PeGJ+PiC4nrbnTgYTcSSYbdmDlHJIB126M30:g8D2x8ddTd25S4nXT/bmDlpeGk

Score

N/A

Malware Config

Signatures

Files

299a0b8b1fd50c54cf5ef054af0078dd717e0e019c6386ad2cc6a0b795cbbf7f
.dll regsvr32 windows x86

fe586be0ec205e0b3ecdd7872bd5c428

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

DisableThreadLibraryCalls
InterlockedExchange
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

oleaut32

VARIANT_UserFree
VARIANT_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
VARIANT_UserSize
VARIANT_UserMarshal

rpcrt4

NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 51B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe586be0ec205e0b3ecdd7872bd5c428

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

oleaut32

rpcrt4

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.orpc Size: 512B - Virtual size: 51B

.data Size: 57KB - Virtual size: 57KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.orpc
Size: 512B - Virtual size: 51B

.data
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB