bcb3d9164f4354629750b6df1c0e285da1e6ac6ccd08c63425dff0b312736f85

Sharing

Copy URL Twitter E-mail

General

Target

bcb3d9164f4354629750b6df1c0e285da1e6ac6ccd08c63425dff0b312736f85
Size

200KB
MD5

926bd2884220f4cf65e367ea9d101810
SHA1

fd6fb5783ce3b346138f5e50bb85033fb5ba270b
SHA256

bcb3d9164f4354629750b6df1c0e285da1e6ac6ccd08c63425dff0b312736f85
SHA512

134e48538e035f8be3eb95f15fb95d40287503a67ba8808c49fdcbd4354544cf7d05b82a22fd3fdb5b28fd3c3b52d9bf3769f96a5b9001b380890809ce29d83d
SSDEEP

3072:j9SkJqfPk/C20e7rZEErQCw8YwpXzSucmn4RCyojeVVh0wD4eAZYtXn64Z4sIqu6:hS0xC2779yEpHc8lyr54JZYtq4Z4s

Score

N/A

Malware Config

Signatures

Files

bcb3d9164f4354629750b6df1c0e285da1e6ac6ccd08c63425dff0b312736f85
.dll regsvr32 windows x86

458241d57cd94e74d80d7d5a15f96cac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_initterm
sprintf
swprintf
_except_handler3
malloc
free
wcslen

ntdll

NtDeviceIoControlFile

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteValueW

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForMultipleObjects
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
Sleep
SetEvent
LeaveCriticalSection
CloseHandle
UnregisterWaitEx
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
CreateEventA
InterlockedDecrement
CreateFileW
RegisterWaitForSingleObject
ResetEvent
UnregisterWait
GetCurrentProcess
WaitForSingleObject
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess

rpcrt4

MesDecodeBufferHandleCreate
MesHandleFree
NdrMesTypeFree2
NdrMesTypeDecode2
NdrMesTypeEncode2
MesEncodeDynBufferHandleCreate

Exports

Exports

DllRegisterServer
DllUnregisterServer
SCardAccessStartedEvent
SCardAddReaderToGroupA
SCardAddReaderToGroupW
SCardBeginTransaction
SCardCancel
SCardConnectA
SCardConnectW
SCardControl
SCardDisconnect
SCardEndTransaction
SCardEstablishContext
SCardForgetReaderA
SCardForgetReaderGroupA
SCardForgetReaderGroupW
SCardForgetReaderW
SCardGetAttrib
SCardGetStatusChangeA
SCardGetStatusChangeW
SCardIntroduceReaderA
SCardIntroduceReaderGroupA
SCardIntroduceReaderGroupW
SCardIntroduceReaderW
SCardIsValidContext
SCardListReaderGroupsA
SCardListReaderGroupsW
SCardListReadersA
SCardListReadersW
SCardLocateCardsA
SCardLocateCardsByATRA
SCardLocateCardsByATRW
SCardLocateCardsW
SCardReconnect
SCardReleaseBadContext
SCardReleaseContext
SCardReleaseStartedEvent
SCardRemoveReaderFromGroupA
SCardRemoveReaderFromGroupW
SCardSetAttrib
SCardState
SCardStatusA
SCardStatusW
SCardTransmit

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

458241d57cd94e74d80d7d5a15f96cac

Headers

File Characteristics

Imports

msvcrt

ntdll

advapi32

kernel32

rpcrt4

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.data Size: 172KB - Virtual size: 173KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 22KB - Virtual size: 22KB

.data
Size: 172KB - Virtual size: 173KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB