fbf0f6c4182a6ad2424a605e2db5a5433586e6aa9d777eaad1e336bfaf24030d

Sharing

Copy URL Twitter E-mail

General

Target

fbf0f6c4182a6ad2424a605e2db5a5433586e6aa9d777eaad1e336bfaf24030d
Size

176KB
MD5

89efdde2fb781f4d4ac5d2c3dc266087
SHA1

db6d3a280dc2a34ed0a7b0aad2434d61722da224
SHA256

fbf0f6c4182a6ad2424a605e2db5a5433586e6aa9d777eaad1e336bfaf24030d
SHA512

416faf2dbce14d1d98d3b16322603165f3fc2adcebdd569f46e88c0a2635a76095db2d192c6572f37c9c98df321d2b70c88ff03a72633c553382093fc37970f8
SSDEEP

3072:+Ct437oPxcYA61eZtm9osllWna/bnrA2oUyN7PwI0lWpQ53:RtoEPX1eZgOilWanA1pw

Score

N/A

Malware Config

Signatures

Files

fbf0f6c4182a6ad2424a605e2db5a5433586e6aa9d777eaad1e336bfaf24030d
.dll regsvr32 windows x86

ded7b0556447143b87886aebf147609f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
GetCPInfo
GetOEMCP
GetFileAttributesA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetCommandLineA
ExitProcess
TerminateProcess
HeapSize
GlobalFindAtomA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
lstrcmpW
GlobalFlags
WritePrivateProfileStringA
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalAddAtomA
SetLastError
GlobalFree
LockResource
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetSystemTimeAsFileTime
DeviceIoControl
CreateFileA
ReadFile
GetVersion
SetFileAttributesA
CreateDirectoryA
GetLogicalDrives
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
GetSystemDirectoryA
GetShortPathNameA
CreateProcessA
CopyFileA
GetVolumeInformationA
OpenMutexA
CloseHandle
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
IsDBCSLeadByte
lstrcatA
lstrcpyA
lstrcpynA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LCMapStringA
InterlockedExchange

user32

IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
ShowWindow
SetWindowLongA
GetDlgItem
LoadCursorA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowTextA
SetWindowTextA
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
GetMessageA
TranslateMessage
DispatchMessageA
SystemParametersInfoA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
PostMessageA
DestroyMenu
RegisterWindowMessageA
PostQuitMessage
wsprintfA
GetForegroundWindow
GetSystemMetrics
UnregisterClassA
SetWindowsHookExA
GetClientRect
GetWindow
GetClassNameA
GetParent
SendMessageA
CallNextHookEx
UnhookWindowsHookEx
CallWindowProcA
CharNextA
DefWindowProcA
RegisterClassA
GetClassInfoA
GetActiveWindow
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetMenu
AdjustWindowRectEx
LoadBitmapA

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
GetDeviceCaps

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

OpenServiceA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
QueryServiceStatus
RegQueryValueExA
OpenSCManagerA
RegDeleteKeyA
CloseServiceHandle
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA

ole32

StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantInit
VariantChangeType
VariantClear
SysStringLen
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ded7b0556447143b87886aebf147609f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 8KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 20KB - Virtual size: 18KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 20KB - Virtual size: 18KB