b0d9e7cf8f8cb0849d302bf88270951ffdf37bbadc0a6ee1c16cc416aaa81af4

General

Target

b0d9e7cf8f8cb0849d302bf88270951ffdf37bbadc0a6ee1c16cc416aaa81af4
Size

43KB
MD5

868e927bfa51626d6f1eb8e001fbe607
SHA1

09cff7e537aef5816069d2bbc6dd4bd2a3c912e0
SHA256

b0d9e7cf8f8cb0849d302bf88270951ffdf37bbadc0a6ee1c16cc416aaa81af4
SHA512

3aff502a3ea2dbc045ddfcf2531442a402b147f08e9844ea9a9a5f8129bd61328cf8aad23efd4a6799760581fdced30cf08b2ee5fa24d5df0ed2c0c903ddd345
SSDEEP

768:go/ZlYZNyCZgHpkav/4zNVH563Q6A/BolgLa1:go/ZlYmcg6zpd1La

Score

N/A

Malware Config

Signatures

Files

b0d9e7cf8f8cb0849d302bf88270951ffdf37bbadc0a6ee1c16cc416aaa81af4
.dll regsvr32 windows x86

99ffc78a57eda41724903bd16d916ee8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
GetSystemDirectoryA
CreateThread
VirtualAlloc
GetLocalTime
InterlockedIncrement
GetWindowsDirectoryA
CreateMutexA
GetLastError
GetProcAddress
CloseHandle
LoadLibraryA
GetModuleHandleA

user32

TranslateMessage
DispatchMessageA
RegisterClassExA
KillTimer
SetTimer
DefWindowProcA
GetMessageA
SetWindowsHookExA
FindWindowExA
PostMessageA
UnhookWindowsHookEx
CreateWindowExA
ShowWindow
CallNextHookEx

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

ole32

CoCreateGuid

msvcrt

free
strchr
fopen
fwrite
fclose
strrchr
__CxxFrameHandler
_stricmp
_except_handler3
_initterm
malloc
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf

psapi

GetModuleBaseNameA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
iQJMjAxo

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99ffc78a57eda41724903bd16d916ee8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

psapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 930B

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 930B