e73300c805e38a8f34fa562aba85d0fcc6350dfc6e89f718a104d08cdf4680a9

Sharing

Copy URL Twitter E-mail

General

Target

e73300c805e38a8f34fa562aba85d0fcc6350dfc6e89f718a104d08cdf4680a9
Size

814KB
MD5

11993a7269fbe926b22a1fd5d01769b0
SHA1

6d6a7ba5f2192df1bc0525d0723098d594b315ad
SHA256

e73300c805e38a8f34fa562aba85d0fcc6350dfc6e89f718a104d08cdf4680a9
SHA512

542e324f02f08f21ee5930fb8ca34e75a4d0f0cbbabbde6264a7262f0e39e6501280ddada2099338e4c4a7e7ac5f17114e7b780844b06d4673f2db0c386cb1f3
SSDEEP

12288:yt9uecLUxOAlZuIgyM9Bh0jG7a+rFVbC6GyMaa7GUpmemdofsOXJTMk:yyecLUxO4Qh02VrXEya7GUoe9JXK

Score

N/A

Malware Config

Signatures

Files

e73300c805e38a8f34fa562aba85d0fcc6350dfc6e89f718a104d08cdf4680a9
.dll regsvr32 windows x86

dff86a7c9786192598932e11ef4891cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Locate_DevNode_ExA
CM_Disconnect_Machine
CM_Reenumerate_DevNode_Ex
CM_Connect_MachineA

setupapi

SetupDiOpenDevRegKey
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA

kernel32

GetVersionExA
lstrcmpA
FormatMessageA
GetPrivateProfileStringA
WritePrivateProfileStringA
MulDiv
Sleep
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
RemoveDirectoryA
GetShortPathNameA
CreateDirectoryA
SetErrorMode
LoadLibraryA
lstrcpyA
lstrcpynA
SetFilePointer
LocalLock
LocalUnlock
LocalSize
LocalReAlloc
SetLastError
GetCurrentThreadId
DeviceIoControl
GetCurrentProcessId
GetCurrentProcess
FlushInstructionCache
GetTempPathA
GetFileAttributesA
WriteFile
OutputDebugStringA
CreateFileA
CloseHandle
GetTickCount
GetProcessHeap
HeapAlloc
LocalAlloc
LocalHandle
LocalFree
FindResourceExA
LockResource
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
IsDBCSLeadByte
GetModuleHandleW
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
lstrcmpiA
lstrlenA
GetModuleHandleA
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
IsProcessorFeaturePresent
InterlockedCompareExchange
CompareStringW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
QueryPerformanceCounter
GetEnvironmentStringsW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CopyFileA
GlobalFree
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
TlsFree
GetModuleFileNameW
CompareStringA
GlobalGetAtomNameA
GetAtomNameA
GetThreadLocale
FileTimeToSystemTime
SystemTimeToFileTime
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
MoveFileA
GetStringTypeExA
ReadFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GlobalAddAtomA
GlobalFlags
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
FreeResource
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileSizeEx
GetFileTime
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
GetCurrentDirectoryA
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
ExitThread
CreateThread
GetCommandLineA
HeapReAlloc
HeapSize
ExitProcess
GetACP
IsValidCodePage
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

OffsetRect
GetMenu
SetWindowPlacement
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetClassInfoA
GetClientRect
UpdateWindow
ShowScrollBar
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
TrackPopupMenuEx
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
IsChild
WinHelpA
LoadIconA
RegisterWindowMessageA
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
InflateRect
DestroyMenu
IntersectRect
GetNextDlgTabItem
CreateDialogIndirectParamA
SetCursor
ShowOwnedPopups
DeleteMenu
SetRectEmpty
InvalidateRect
GetDialogBaseUnits
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReleaseCapture
GetMenuBarInfo
LoadMenuA
ReuseDDElParam
UnpackDDElParam
WindowFromPoint
GetKeyNameTextA
MapVirtualKeyA
IsRectEmpty
CheckRadioButton
SetParent
UnionRect
GetDCEx
LockWindowUpdate
SetCapture
CheckDlgButton
CheckMenuItem
SetScrollPos
SetFocus
GetFocus
GetDesktopWindow
ClientToScreen
GetDlgCtrlID
PtInRect
CharUpperA
DestroyIcon
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetSystemMenu
LoadBitmapA
ModifyMenuA
EndDialog
EnableMenuItem
RemoveMenu
GetSubMenu
InsertMenuA
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
MessageBoxA
GetLastActivePopup
SendMessageA
GetWindow
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
GetMenuItemCount
GetMenuItemInfoA
SetMenuItemInfoA
LoadStringA
RegisterClassA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
IsIconic
ShowWindow
MsgWaitForMultipleObjects
PostQuitMessage
PostMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
GetWindowRect
GetParent
SetWindowPos
SystemParametersInfoA
GetSystemMetrics
SetRect
GetDlgItem
IsWindowEnabled
EnableWindow
wsprintfA
CreateWindowExA
RegisterClassExA
DestroyWindow
LoadCursorA
GetClassInfoExA
IsWindow
KillTimer
SetTimer
SetWindowTextA
CallWindowProcA
GetWindowLongA
SetWindowLongA
DefWindowProcA
UnhookWindowsHookEx
CharNextW
CharNextA
ScrollWindowEx
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetScrollPos
GetDlgItemInt
GetSysColorBrush
GetSysColor
ValidateRect
GetCursorPos
GetKeyState

gdi32

SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
DeleteObject
CreateDCA
SelectClipRgn
SetROP2
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetStockObject
GetObjectA
SelectObject
GetTextMetricsA
GetDeviceCaps
CreateFontIndirectA
BitBlt
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
GetClipRgn
SetPolyFillMode
GetBkColor
CreateCompatibleBitmap
StretchDIBits
CreateFontA
GetCharWidthA
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateCompatibleDC
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
CopyMetaFileA

winspool.drv

EnumPortsA
OpenPrinterA
ClosePrinter
GetPrinterA
EnumPrintersA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

ole32

CoUninitialize
CoInitializeEx
ReadFmtUserTypeStg
CLSIDFromString
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoDisconnectObject
OleDuplicateData
ReadClassStg
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
OleRegGetUserType
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
GetRunningObjectTable
MkParseDisplayName
CreateBindCtx
CoGetInstanceFromFile
CreateFileMoniker
ProgIDFromCLSID

oleaut32

VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
GetErrorInfo
CreateErrorInfo
SetErrorInfo
SafeArrayRedim
SafeArrayCreate
SafeArrayDestroy
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantChangeType
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
VariantInit
VariantClear
SysAllocStringLen
SafeArrayUnlock
SafeArrayLock
VarBstrCat
SysAllocStringByteLen
SysStringByteLen
VariantCopy
VarBstrFromDate

shlwapi

PathStripToRootA
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
PathIsUNCA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

comdlg32

GetFileTitleA

shell32

SHGetFileInfoA
DragFinish
ExtractIconA
DragQueryFileA

Exports

Exports

?COMWndProc@@YGJPAUHWND__@@IIJ@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dff86a7c9786192598932e11ef4891cd

Headers

File Characteristics

Imports

cfgmgr32

setupapi

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

shlwapi

oleacc

comdlg32

shell32

Exports

Exports

Sections

.text Size: 481KB - Virtual size: 481KB

.rdata Size: 109KB - Virtual size: 108KB

.data Size: 184KB - Virtual size: 261KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 481KB - Virtual size: 481KB

.rdata
Size: 109KB - Virtual size: 108KB

.data
Size: 184KB - Virtual size: 261KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 33KB - Virtual size: 33KB