8d25b17d679946a6f4c99eb71c3da56539cfebf84ca0a835dc9e38b4c1118b81

Sharing

Copy URL Twitter E-mail

General

Target

8d25b17d679946a6f4c99eb71c3da56539cfebf84ca0a835dc9e38b4c1118b81
Size

384KB
MD5

89423bfee3dc6008eb40b45fc5d53b20
SHA1

8395704ae6fc307818d31bbe0f77274fb43d3dda
SHA256

8d25b17d679946a6f4c99eb71c3da56539cfebf84ca0a835dc9e38b4c1118b81
SHA512

33b7e6d01f983f2dad2a929a51bfb1603c64fe4e8983b4b8931e7a3ee41568c7453f46f60c0eb83100f470e4be894779c26212cfe3631c650b5c2fc1a5126b39
SSDEEP

6144:X3FPlXCTSCg3EnXqfAdICuJzjqrHpgMo/k+jVl1gtKzM5VBfxN:X3ZlSTSCgUXqyyqeMo/FJqKz0VDN

Score

N/A

Malware Config

Signatures

Files

8d25b17d679946a6f4c99eb71c3da56539cfebf84ca0a835dc9e38b4c1118b81
.dll regsvr32 windows x86

6ad3bd1ae3ae8d49706d4e23c5eed985

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameA
GetModuleHandleA
lstrlenW
GetModuleFileNameA
lstrcmpiA
HeapDestroy
FreeLibrary
GetProcAddress
LoadLibraryA
EnterCriticalSection
lstrlenA
GetFileAttributesA
CloseHandle
UnmapViewOfFile
WaitForSingleObject
CreateEventA
SetEvent
GetOEMCP
GetACP
GetStringTypeW
MultiByteToWideChar
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
WideCharToMultiByte
GetLastError
lstrcatA
lstrcpyA
GetCPInfo
lstrcpynA
GetStringTypeA
ResetEvent
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsBadCodePtr
UnhandledExceptionFilter
HeapSize
HeapReAlloc
LCMapStringA
TerminateProcess
GetCurrentProcess
SetLastError
MapViewOfFile
CreateFileMappingA
CreateFileA
QueryPerformanceFrequency
GetFileSize
FindClose
VirtualQuery
VirtualProtect
FindFirstFileA
SearchPathA
GetWindowsDirectoryA
TlsSetValue
ReadFile
LCMapStringW
GetCommandLineA
SystemTimeToFileTime
Sleep
InterlockedExchange
RaiseException
RtlUnwind
CreateThread
GetCurrentThreadId
ExitProcess
ExitThread
GetVersion
HeapFree
HeapAlloc
TlsFree
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue

user32

wsprintfA
GetDesktopWindow
CharLowerBuffA
CharNextA
LoadStringA
GetMessageA
DispatchMessageA
PostThreadMessageA

advapi32

RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

ole32

CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CLSIDFromProgID
CoCreateInstance
StringFromCLSID
CoTaskMemFree

oleaut32

VariantCopyInd
SysAllocStringByteLen
DispGetParam
SafeArrayCreate
RegisterTypeLi
LoadTypeLi
SafeArrayPutElement
LoadRegTypeLi
CreateErrorInfo
SetErrorInfo
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocStringLen
SafeArrayDestroy
SysFreeString
SysStringLen
SysReAllocStringLen
VariantChangeType
SysAllocString
VariantCopy
VariantInit
VariantClear
SafeArrayGetElement
SysStringByteLen

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ad3bd1ae3ae8d49706d4e23c5eed985

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

version

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 148KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 16KB - Virtual size: 15KB

.text Size: 156KB - Virtual size: 156KB

.text
Size: 152KB - Virtual size: 148KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 16KB - Virtual size: 15KB

.text
Size: 156KB - Virtual size: 156KB