e5cdd909d3db5186fe2900466bff172ff5ae1d681fae9462e350b9cf9feb5a0c

Sharing

Copy URL Twitter E-mail

General

Target

e5cdd909d3db5186fe2900466bff172ff5ae1d681fae9462e350b9cf9feb5a0c
Size

140KB
MD5

1320a018fc97d438d6f4723abda2be61
SHA1

69c967f0c17ac816a2d7052997e0726030fac6be
SHA256

e5cdd909d3db5186fe2900466bff172ff5ae1d681fae9462e350b9cf9feb5a0c
SHA512

b8798719089d15aa4f6d38d7692bd1ad0bea9f2137b32d2a13b871f4964cd6b8737fb895e671757fd5e665314632ef3bda633a6da5669e8fae27df092da00c82
SSDEEP

3072:CS7FAl9hBlNRVlMQyDmzxfrzDwqs2Jnjta4n:D7F6PBlNR4Az5UqsE57n

Score

N/A

Malware Config

Signatures

Files

e5cdd909d3db5186fe2900466bff172ff5ae1d681fae9462e350b9cf9feb5a0c
.dll regsvr32 windows x86

1ab0a4654e18db279a53b428ed6d1a9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA

shlwapi

SHSetValueA
SHGetValueA
StrStrIA

winmm

timeGetTime

wininet

InternetReadFile
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA

msvcrt

ispunct
_stricmp
printf
islower
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
atoi
tmpnam
??0exception@@QAE@ABV0@@Z
isalnum
fopen
fwrite
fclose
srand
strstr
free
strtok
toupper
isalpha
isupper
isspace
strerror
isgraph
isxdigit
__mb_cur_max
malloc
wctomb
wcscmp
wcslen
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
strchr
_CxxThrowException
__CxxFrameHandler
tolower

oleaut32

SysFreeString
SysAllocString
VariantClear
GetErrorInfo

ole32

CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

netapi32

Netbios

user32

RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetClassNameA
EnumChildWindows
EnumWindows
SetWindowPos
wsprintfA
KillTimer
SetTimer
DefWindowProcA
OpenClipboard
SystemParametersInfoA
GetWindowThreadProcessId
CloseClipboard

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegOpenKeyExA

kernel32

CreateProcessA
WaitForSingleObject
MoveFileExA
GetCurrentProcessId
DeleteFileA
HeapFree
Sleep
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersion
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
lstrcpyA
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetEnvironmentStrings
LocalFree
FormatMessageA
HeapSize
HeapAlloc
lstrcpynA
lstrcmpiA
lstrcmpA
GetEnvironmentVariableA
GetThreadTimes
GetCurrentThread
GetModuleHandleA
GetProcessTimes
GetCurrentProcess
GetSystemInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedExchange
GetLocalTime
CloseHandle
CreateFileA
SetLastError
GetFullPathNameA
GetProcessHeap
GetModuleFileNameA
MultiByteToWideChar
SleepEx
OpenProcess
lstrlenA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ab0a4654e18db279a53b428ed6d1a9a

Headers

File Characteristics

Imports

rpcrt4

shlwapi

winmm

wininet

msvcrt

oleaut32

ole32

psapi

netapi32

user32

version

advapi32

kernel32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 20KB - Virtual size: 22KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 20KB - Virtual size: 22KB

.reloc
Size: 8KB - Virtual size: 6KB