b3fd1129bb853eaf965b2c28aff5de3c464f086bc24289a89abef82e93d63cff

Sharing

Copy URL Twitter E-mail

General

Target

b3fd1129bb853eaf965b2c28aff5de3c464f086bc24289a89abef82e93d63cff
Size

104KB
MD5

04f9b0c04d1e15d56ceb4b3ed94c63c6
SHA1

9fe4821524649d90ec2c170b1fdcd8a5b4cdd496
SHA256

b3fd1129bb853eaf965b2c28aff5de3c464f086bc24289a89abef82e93d63cff
SHA512

74167ea62e2d217f5d9a371838b78fd01861f4c0c054c46b262c2dac3221dc9a865760426ae6b8a5258d07c62c30b782666e704bf374f510c75cdf1fd800077f
SSDEEP

3072:3O2K+nWQJJYNZyl294h9My6lRyZRQGP+:FK1a2947GQZRQQ+

Score

N/A

Malware Config

Signatures

Files

b3fd1129bb853eaf965b2c28aff5de3c464f086bc24289a89abef82e93d63cff
.dll regsvr32 windows x86

b7591b2f6a898578b14904c32d942bd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
EnterCriticalSection
LeaveCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetLastError
lstrlenA
lstrcmpiA
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LoadLibraryExA
GetModuleHandleA
LocalFree
HeapDestroy
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
RaiseException
QueryPerformanceCounter
ExitProcess
GetProcessHeap
HeapSize
HeapReAlloc

user32

CharNextA

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA

ole32

CoInitialize
CoTaskMemRealloc
OleRun
CoCreateInstance
StringFromGUID2
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysStringLen
LoadRegTypeLi
DispCallFunc
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
GetErrorInfo

shlwapi

PathFindExtensionA

msvcr71

_resetstkoflw
?terminate@@YAXXZ
__security_error_handler
_onexit
__dllonexit
??1type_info@@UAE@XZ
memset
_ismbcspace
_mbsinc
_atoi64
_time64
_purecall
atoi
??2@YAPAXI@Z
__CppXcptFilter
_adjust_fdiv
memmove
_CxxThrowException
_except_handler3
free
??3@YAXPAX@Z
__CxxFrameHandler
malloc
_initterm
_vscprintf
vsprintf
??_V@YAXPAX@Z
wcsncpy
realloc
??_U@YAPAXI@Z
_mbsstr
_mbscmp

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterInstall

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7591b2f6a898578b14904c32d942bd6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

msvcr71

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 764B

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 764B

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 5KB