9e32c632ebe9b4237e1960c1eb07a7d80f285258167a39ab8aaf7927c56517e5

Sharing

Copy URL Twitter E-mail

General

Target

9e32c632ebe9b4237e1960c1eb07a7d80f285258167a39ab8aaf7927c56517e5
Size

362KB
MD5

28dc0102a467f31e332469383db11162
SHA1

8df0b8d8ba93bb79410af15de0f445e3ce0db885
SHA256

9e32c632ebe9b4237e1960c1eb07a7d80f285258167a39ab8aaf7927c56517e5
SHA512

064611269efa812982082909f13f1b3f78669555cfad9ea111e953d40c55708658f378761ddac9cf3b756ceb3c5f1a74b1b0733093a44e1cb61de4aadd5517cf
SSDEEP

6144:DZLKQcPoP4OYybDi6WtV9d6btNSVLDB+IyCIbkJ4ttkgaq6ejePHwE6c/c0:dL9cPolYybwX2nQLDB+1CakJ4ttR36e0

Score

N/A

Malware Config

Signatures

Files

9e32c632ebe9b4237e1960c1eb07a7d80f285258167a39ab8aaf7927c56517e5
.dll regsvr32 windows x86

60b70d449342f2cb1a9a55b3302e5065

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyW
StrCmpIW
UrlEscapeW
PathStripPathW
StrStrIW

kernel32

DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
ExitThread
GetSystemTime
CreateEventW
CloseHandle
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
lstrlenW
CreateFileA
FlushFileBuffers
TerminateProcess
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetModuleHandleA
WriteFile

user32

GetClassNameW
GetWindowTextW
EnumChildWindows
CallWindowProcW
SetWindowLongW
SetPropW
GetWindowThreadProcessId
SetActiveWindow
PostMessageW
SendMessageW
GetPropW
RemovePropW
OffsetRect
IntersectRect
InflateRect
ClientToScreen
SetWindowTextW
PeekMessageW
TranslateMessage
MsgWaitForMultipleObjects
DispatchMessageW
RealGetWindowClassW

advapi32

SetSecurityInfo
RegSetValueExW
RegQueryValueExW
RegCreateKeyW
RegCloseKey
GetSecurityDescriptorSacl

ole32

CoInitializeEx
CoTaskMemFree
CoUninitialize
CoCreateInstance

oleaut32

VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllPreinstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60b70d449342f2cb1a9a55b3302e5065

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 291KB - Virtual size: 291KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 5KB - Virtual size: 15KB

.rsrc Size: 1024B - Virtual size: 844B

.reloc Size: 32KB - Virtual size: 32KB

.text
Size: 291KB - Virtual size: 291KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 5KB - Virtual size: 15KB

.rsrc
Size: 1024B - Virtual size: 844B

.reloc
Size: 32KB - Virtual size: 32KB