be853532af5ecb2f4e815f652280cdaf5d52a2328fe056c4af36ebf297b8b4f6

Sharing

Copy URL

Twitter E-mail

General

Target

be853532af5ecb2f4e815f652280cdaf5d52a2328fe056c4af36ebf297b8b4f6
Size

60KB
MD5

67177e61a4abf138a836a3e1c2e8ccb6
SHA1

44bcb41ac229f3e4c20e9aabb4970135069f8584
SHA256

be853532af5ecb2f4e815f652280cdaf5d52a2328fe056c4af36ebf297b8b4f6
SHA512

22f02771cd9153143f0587669b3035b7004e8fa051a5991815aad610e68c9dedc6b30eabeacfa464be0baa7d20f42a3160534fe189b9201e3e632ae5fff0287c
SSDEEP

1536:+BBvrQbgZzNnAQm33xpt914mkLY6XYG860jCxy:kBput9GmwYG/

Score

N/A

Malware Config

Signatures

Files

be853532af5ecb2f4e815f652280cdaf5d52a2328fe056c4af36ebf297b8b4f6
.dll regsvr32 windows x86

3085e48c90bef945417e67f8717b509b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
FreeLibrary
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
GetShortPathNameA
Sleep
Process32Next
Process32First
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
CreateThread
RemoveDirectoryA
GetCommandLineW
GetCurrentProcessId
LoadLibraryA
GetProcAddress
lstrlenA
CloseHandle
LocalFree
GetModuleFileNameA
ExitProcess
MultiByteToWideChar
SetFileAttributesA
MoveFileA
lstrlenW
WideCharToMultiByte
CreateDirectoryA
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
DeleteFileA
GetModuleHandleA

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA

shell32

SHGetSpecialFolderPathA
CommandLineToArgvW

ole32

CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoCreateInstance

oleaut32

SysStringLen
LoadRegTypeLi
SysAllocString
VariantClear
SysFreeString

msvcrt

fclose
_stricmp
_strlwr
_adjust_fdiv
malloc
_initterm
free
atoi
strncmp
strchr
strncpy
_wcslwr
wcsstr
memcmp
_purecall
memcpy
strstr
strrchr
sprintf
_access
strcat
strlen
??3@YAXPAX@Z
strcmp
memset
strcpy
_strupr
fread
??2@YAPAXI@Z
ftell
fseek
fopen

shlwapi

SHDeleteValueA
SHDeleteKeyA
SHSetValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetObjectType
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3085e48c90bef945417e67f8717b509b

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

mdata Size: 4KB - Virtual size: 4B

bdata Size: 4KB - Virtual size: 4B

idata Size: 4KB - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

mdata
Size: 4KB - Virtual size: 4B

bdata
Size: 4KB - Virtual size: 4B

idata
Size: 4KB - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 2KB