af556f1bc248abed01dab4d88d72056232abf5b1d9e2bfeff60a1f1c7a3fa95d

Sharing

Copy URL

Twitter E-mail

General

Target

af556f1bc248abed01dab4d88d72056232abf5b1d9e2bfeff60a1f1c7a3fa95d
Size

212KB
MD5

9126cc6e0fbbc7fa1b5cb926a5adb71c
SHA1

8a8c1dc0f865a29a6abb0d4beceb5d846c23fd35
SHA256

af556f1bc248abed01dab4d88d72056232abf5b1d9e2bfeff60a1f1c7a3fa95d
SHA512

be1bb7606662e36dff72b8679b9de8bef0e4a6854d7bb6a08ef9ec04b9a5b2be26374617f71baca66fbe2e215d607350191ab61debb00b5d66312bfca373f4d0
SSDEEP

3072:EuN+EOSAPSLe/px15MTNtNWE+s5ka9bCtjRDL97O2/8q2VQIoJj8t:EjEwt0ya9bCJ9L9tANoZ8

Score

N/A

Malware Config

Signatures

Files

af556f1bc248abed01dab4d88d72056232abf5b1d9e2bfeff60a1f1c7a3fa95d
.dll regsvr32 windows x86

7b5a433e663461e10a0887fc706d0d3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
DeleteUrlCacheEntry
InternetReadFile

kernel32

InterlockedIncrement
InterlockedDecrement
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
SetThreadLocale
GetThreadLocale
GetVersionExA
FlushInstructionCache
GetCurrentProcess
GlobalAlloc
GetCurrentThreadId
SetLastError
LockResource
DebugBreak
OutputDebugStringA
lstrcmpA
MulDiv
GlobalUnlock
GlobalLock
GetLocalTime
Sleep
CloseHandle
CreateProcessA
GlobalFree
GlobalHandle
GetProcAddress
LoadLibraryW
InterlockedExchange
GetACP
GetLocaleInfoA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsDBCSLeadByte
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
WideCharToMultiByte
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetOEMCP
GetCPInfo
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStdHandle
WriteFile
ExitProcess
HeapCreate
HeapDestroy
GetCommandLineA
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
LoadLibraryA
GetEnvironmentStringsW
lstrlenW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetStartupInfoA

user32

RegisterClassExA
LoadCursorA
SetForegroundWindow
GetDesktopWindow
SetFocus
CreateAcceleratorTableA
FindWindowA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
RegisterWindowMessageA
CreateDialogIndirectParamA
BringWindowToTop
ShowWindow
SetTimer
KillTimer
GetForegroundWindow
UnregisterClassA
GetClassInfoExA
GetFocus
BeginPaint
EndPaint
CallWindowProcA
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
MoveWindow
GetSysColor
SetWindowContextHelpId
GetWindow
SendDlgItemMessageA
SetWindowPos
CreateWindowExA
DestroyWindow
MapDialogRect
EndDialog
CharLowerA
FindWindowExA
DefWindowProcA
SetWindowsHookExA
GetCursorPos
CallNextHookEx
LoadStringA
SetRect
PtInRect
GetWindowRect
GetWindowLongA
SetWindowLongA
IsWindow
SendMessageA
UnhookWindowsHookEx
CharNextA
DestroyAcceleratorTable

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA

ole32

CoGetClassObject
OleLockRunning
CoCreateInstance
CLSIDFromProgID
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromString
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
StringFromCLSID
StringFromGUID2

oleaut32

OleCreateFontIndirect
VariantInit
SysStringByteLen
VariantChangeType
VariantClear
SysAllocStringLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi

gdi32

DeleteObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateSolidBrush
GetObjectA
GetStockObject
SelectObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b5a433e663461e10a0887fc706d0d3d

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

ole32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 136KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 16KB - Virtual size: 14KB