7a1c20f6a73d91b469cc596d858b45d52808c963af96ae84fd4714e24ca29947

Sharing

Copy URL

Twitter E-mail

General

Target

7a1c20f6a73d91b469cc596d858b45d52808c963af96ae84fd4714e24ca29947
Size

308KB
MD5

018bddca1efb802ad7cf672963daf996
SHA1

4e02823a31c3789e689978c97c674236739ed3b0
SHA256

7a1c20f6a73d91b469cc596d858b45d52808c963af96ae84fd4714e24ca29947
SHA512

a5e3c6f7dd89ccdb16174da87c9d1722695cd813627399aee242635ff662bb315414d6e9087fdcf2aa628c2ac7981a0de81c4cbdbe823470136e715c111aeff7
SSDEEP

6144:8vcOHDNN1v4ZnXhn405RCv0X/jSw++uZTJj4L0IOdcVGFhE++eeFhE++ed:8BN4ne0mv0vjSwN4FjULOiGm/e4m/ed

Score

N/A

Malware Config

Signatures

Files

7a1c20f6a73d91b469cc596d858b45d52808c963af96ae84fd4714e24ca29947
.dll regsvr32 windows x86

e6bbfbf735e4df02c4c91eca7fe739cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_purecall
_except_handler3
wcscpy
swprintf
wcslen
_wcsnicmp
??3@YAXPAX@Z

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateThread
WaitForSingleObject
GetExitCodeThread
GetCurrentThreadId
ExitThread
GetSystemInfo
GlobalMemoryStatusEx
GetLastError
lstrcmpW
FileTimeToSystemTime
DisableThreadLibraryCalls
CreateEventW
Sleep
CloseHandle
MultiByteToWideChar
LoadLibraryW
InterlockedDecrement
SetEvent
InterlockedIncrement
GetEnvironmentVariableW
WritePrivateProfileStringW
GetCurrentDirectoryW
LocalLock
LocalUnlock
GetWindowsDirectoryW
lstrcmpiW
RaiseException
LoadLibraryA
FreeLibrary
GetVersionExA
GetProcAddress
InterlockedExchange
lstrcpynW
FindFirstFileW
FindNextFileW
FindClose
lstrcatW
lstrlenW
LocalAlloc
GetPrivateProfileStringW
LocalReAlloc
LocalFree
lstrcpyW
GetModuleFileNameW
GetModuleHandleW

user32

SendMessageW
GetParent
SendDlgItemMessageW
GetThreadDesktop
CreateDesktopW
SetThreadDesktop
SwitchDesktop
CloseDesktop
EnumDisplayDevicesW
wvsprintfW
wsprintfW
EnumWindows
LoadIconW
GetClassInfoW
RegisterClassW
GetDC
ReleaseDC
GetClassNameW
GetWindowLongW
CreateWindowExW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
FillRect
KillTimer
SetTimer
DefWindowProcW
SetForegroundWindow
UpdateWindow
DestroyWindow
GetSystemMetrics
WinHelpW
LoadCursorW
SetCursor
GetWindowTextW
MessageBoxW
SystemParametersInfoW
PostMessageW
SetWindowLongW
CharUpperW
CharNextW
LoadStringW
GetFocus
CheckRadioButton
GetDlgItem
EnableWindow
IsCharUpperW
CharLowerW
CharUpperBuffW
IsDlgButtonChecked

gdi32

GetDeviceCaps
CreateDCW
CreateSolidBrush
CreatePen
GetPixel
GetStockObject
GetClipBox
DeleteObject
SelectObject
CreateBitmap
CreateCompatibleDC
TextOutW
GetTextExtentPoint32W
SetTextColor
SetBkMode
SetBkColor
LineTo
MoveToEx
DeleteDC

shlwapi

ord175
SHDeleteKeyW
ord497
StrCmpW
ord174
ord219
StrStrIW
StrStrW
StrCmpIW
StrCpyNW
ord499
StrToIntW
ord199

shell32

ord170
ord176
ord168
ord167
ord169
ord730
ord100
ord92
Control_RunDLLW
DragAcceptFiles
DragFinish
DragQueryFileW

advapi32

RegQueryInfoKeyW
RegEnumKeyW
RegDeleteValueW
RegQueryValueExA
RegOpenKeyExA
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
LockServiceDatabase
ChangeServiceConfigW
UnlockServiceDatabase
CloseServiceHandle
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyW
RegSetValueExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegDeleteKeyW

ole32

CoCreateGuid
StringFromIID
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx

Exports

Exports

CPlApplet
DeskSetCurrentScheme
DeskSetCurrentSchemeA
DeskSetCurrentSchemeW
DisplayClassInstaller
DisplayOcSetupProc
DisplaySaveSettings
DisplayTestSettingsW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InstallScreenSaver
InstallScreenSaverA
InstallScreenSaverW
MonitorClassInstaller
UpdateCharsetChanges
UpdateUIfontsDueToDPIchange

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6bbfbf735e4df02c4c91eca7fe739cc

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

shlwapi

shell32

advapi32

ole32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 53KB

.data Size: 177KB - Virtual size: 181KB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 54KB - Virtual size: 53KB

.data
Size: 177KB - Virtual size: 181KB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 6KB - Virtual size: 5KB