c8c0373cca8a1b8697e29f9828518a0255462c3a0d3a54a7f0ae2a5b830f1a09

Sharing

Copy URL

Twitter E-mail

General

Target

c8c0373cca8a1b8697e29f9828518a0255462c3a0d3a54a7f0ae2a5b830f1a09
Size

56KB
MD5

4d15269835a18faa5998d90745d17565
SHA1

2a3d31fc1361e2d798adc791763bc5a1b2fc995c
SHA256

c8c0373cca8a1b8697e29f9828518a0255462c3a0d3a54a7f0ae2a5b830f1a09
SHA512

60e11482ef7e8e33fa8334905a5ddc31f0ec07a275b73f0c589f7fed421ed0cc8de73a3d6c4c10441a4a4b5ae4ed7e24b00b08e199540d82d0c0d3020303dfff
SSDEEP

1536:sKe+218yWIxBDXXGV0mEgSAVit6VFt/tP:TynWm7GVrm6VFt/tP

Score

N/A

Malware Config

Signatures

Files

c8c0373cca8a1b8697e29f9828518a0255462c3a0d3a54a7f0ae2a5b830f1a09
.dll regsvr32 windows x86

82c530ed6d090d58a1013c511d612185

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileTime
GetCurrentProcessId
GetLastError
lstrlenA
GetFullPathNameA
GetSystemDirectoryA
SetLastError
GetModuleFileNameW
CreateMutexA
GetVersion
WriteFile
SetFilePointerEx
GetFileSizeEx
GetVersionExA
GetSystemDefaultLCID
GlobalMemoryStatusEx
GetCurrentProcess
lstrcpynW
LocalAlloc
LocalFree
SetErrorMode
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
CloseHandle
ReadFile
LoadLibraryW
GetProcAddress
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
GetTickCount
GetSystemDirectoryW
GetTempPathW
GetTempFileNameW
MoveFileExW
DeleteFileW
Sleep
GetFileSize
GetModuleHandleA
LoadLibraryA
GetModuleHandleW
VirtualFree
CreateFileW
SetFilePointer

user32

PeekMessageW
TranslateMessage
DispatchMessageW

advapi32

SetServiceStatus
RegSetKeySecurity
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
CryptGetKeyParam
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
CryptDecrypt
CryptEncrypt
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CloseServiceHandle
LockServiceDatabase
ChangeServiceConfigW
UnlockServiceDatabase
OpenServiceW
QueryServiceStatus
ControlService
DeleteService
CreateServiceA
StartServiceW
OpenSCManagerW
RegCreateKeyExA
RegFlushKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoCreateGuid

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

msvcrt

_initterm
__dllonexit
vsprintf
_adjust_fdiv
_onexit
??2@YAPAXI@Z
strlen
memset
memcpy
swprintf
_except_handler3
_stricmp
memcmp
wcslen
malloc
free
rand
srand
wcscpy
strchr
__CxxFrameHandler
strcpy
_local_unwind2
sprintf
time
strrchr
atoi
strtoul
_snwprintf
_wcsupr
_purecall
wcscat
wcstoul
printf

shlwapi

SHGetValueW
SHEnumValueW
SHDeleteValueW
SHDeleteKeyW
PathStripPathA
SHSetValueW

ws2_32

inet_ntoa
getsockopt
__WSAFDIsSet
WSAGetLastError
htons
inet_addr
WSASetLastError
closesocket
ntohs

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82c530ed6d090d58a1013c511d612185

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcp60

msvcrt

shlwapi

ws2_32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB