c971a1d5e15888d3a317b5cfa388f39d3fd1d39940ca191764ab23d49a1142ea

Sharing

Copy URL

Twitter E-mail

General

Target

c971a1d5e15888d3a317b5cfa388f39d3fd1d39940ca191764ab23d49a1142ea
Size

236KB
MD5

78d3337f5ba951bb93eafc0bf4ea0c88
SHA1

7703c2d33388986b6211ab280e2d528cfab0b31b
SHA256

c971a1d5e15888d3a317b5cfa388f39d3fd1d39940ca191764ab23d49a1142ea
SHA512

f190b0e2869dee140d6a4af30a9c9d4d0fe2b7be4c8feeee87e50b8116bcc20e5c903ce1dd6d9753610bd2ee9dd3e5c4e147a1981844d9dd531d3fa19696df5c
SSDEEP

6144:oD+SRs3g/JqMdgtf+/wwPxAS7T2+QPYxZ:MSwJ/wqwwpAaT2LPYxZ

Score

N/A

Malware Config

Signatures

Files

c971a1d5e15888d3a317b5cfa388f39d3fd1d39940ca191764ab23d49a1142ea
.dll regsvr32 windows x86

d47772b1e5adb41af24f88c3724d8ff3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

rpcrt4

CStdStubBuffer_DebugServerQueryInterface
NdrStubCall2
NdrStubForwardingFunction
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
NdrDllUnregisterProxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerRelease
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy

oleaut32

LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserFree
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
VARIANT_UserUnmarshal

ole32

HWND_UserUnmarshal
HWND_UserMarshal
HWND_UserSize
HWND_UserFree

msvcr80

_malloc_crt
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_encode_pointer
_encoded_null
_decode_pointer
_initterm
_initterm_e
free
_amsg_exit
_adjust_fdiv

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.orpc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d47772b1e5adb41af24f88c3724d8ff3

Headers

File Characteristics

Imports

kernel32

rpcrt4

oleaut32

ole32

msvcr80

Exports

Exports

Sections

.orpc Size: 8KB - Virtual size: 5KB

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 176KB - Virtual size: 173KB

.orpc
Size: 8KB - Virtual size: 5KB

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 176KB - Virtual size: 173KB