General

Malware Config

Signatures

Files

• c3025ef250d5eb715c064b34f2c5b175007ff3adb5e3536a22987ff68a257f3a

  .dll regsvr32 windows x86

  7d55b793dde65f740dd8ed4c3cf497c2

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleHandleW

  FreeLibrary

  MultiByteToWideChar

  lstrlenA

  SizeofResource

  LoadResource

  FindResourceW

  GetLastError

  LoadLibraryExW

  GetShortPathNameW

  lstrcpynW

  HeapDestroy

  GetProcAddress

  LoadLibraryW

  lstrcpyW

  lstrcatW

  WideCharToMultiByte

  lstrlenW

  InterlockedDecrement

  EnterCriticalSection

  InterlockedIncrement

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  GetModuleFileNameW

  lstrcmpiW

  DisableThreadLibraryCalls

  GetStringTypeW

  GetStringTypeA

  LoadLibraryA

  GetOEMCP

  GetACP

  GetCPInfo

  WriteFile

  GetEnvironmentStringsW

  HeapFree

  HeapAlloc

  HeapReAlloc

  GetCommandLineA

  GetVersion

  LCMapStringA

  LCMapStringW

  ExitProcess

  GetModuleHandleA

  GetModuleFileNameA

  GetEnvironmentVariableA

  GetVersionExA

  HeapCreate

  VirtualFree

  VirtualAlloc

  RtlUnwind

  TerminateProcess

  GetCurrentProcess

  HeapSize

  GetCurrentThreadId

  TlsSetValue

  TlsAlloc

  TlsFree

  SetLastError

  TlsGetValue

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  user32

  CharNextW

  advapi32

  RegQueryInfoKeyW

  RegSetValueExW

  RegEnumKeyExW

  RegOpenKeyExW

  RegCloseKey

  RegDeleteValueW

  RegCreateKeyExW

  RegDeleteKeyW

  RegEnumValueW

  ole32

  CoTaskMemFree

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoCreateInstance

  oleaut32

  SysAllocStringLen

  VariantCopy

  VariantChangeType

  VariantClear

  SysStringLen

  LoadRegTypeLi

  RegisterTypeLi

  LoadTypeLi

  SysAllocString

  SysFreeString

  VarUI4FromStr

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  OWNOJregisterServer

  Sections

  .OWNOJ

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ