a17d64a3ec7a9c77f9e44f65564e0e6030df5c7f539b98711c6e2e7c5118e7d5

Sharing

Copy URL Twitter E-mail

General

Target

a17d64a3ec7a9c77f9e44f65564e0e6030df5c7f539b98711c6e2e7c5118e7d5
Size

164KB
MD5

07bf5bbc37c36a5c885d3ea128f9677c
SHA1

2377ad2cbab4a92ad28c8aaf71396d7f21ed8cc6
SHA256

a17d64a3ec7a9c77f9e44f65564e0e6030df5c7f539b98711c6e2e7c5118e7d5
SHA512

c1dc38f3f181c92e7acdf2ab9f599e2e8d2501672dae9c0246afb02d26de304c59f89ab1c7661d9ae4f954518a36a70a44d746ab94811997240e7a5aba74dd57
SSDEEP

1536:F5b3JGd+N6lCfF/PPWdM/GXvszJb9YkL8W1LXQ3QJlzmT6IhF+SnP9efI0J+ZGt7:PbZG8LvR/AWRXQOYo6b1YixqIrlqp3F

Score

N/A

Malware Config

Signatures

Files

a17d64a3ec7a9c77f9e44f65564e0e6030df5c7f539b98711c6e2e7c5118e7d5
.dll regsvr32 windows x86

6787a718dfd3be1d675dcf96b9c3d330

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetCurrentThreadId
GetCurrentProcessId
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemDirectoryA
WritePrivateProfileStringA
IsBadWritePtr
IsBadReadPtr
MoveFileA
DeleteFileA
TerminateThread
CloseHandle
GetLocalTime
SetFileAttributesA
CopyFileA
WriteFile
CreateFileA
GetVersion
GetWindowsDirectoryA
CreateDirectoryA
GetShortPathNameA
FindClose
FindFirstFileA
WaitForSingleObject
Process32Next
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
SystemTimeToFileTime
FileTimeToSystemTime
GetUserDefaultLangID
GetTempPathA
GetPrivateProfileSectionNamesA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesA
GetCurrentDirectoryA
GetFullPathNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
GetCurrentProcess
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
ExitProcess
VirtualFree
HeapCreate
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetCommandLineA
GetDriveTypeA
FileTimeToLocalFileTime
ExitThread
TlsSetValue
CreateThread
RaiseException
GetSystemTime
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
SetEnvironmentVariableA

user32

GetWindowTextA
CharNextA
LoadCursorA
SetWindowsHookExA
MessageBoxA
UnhookWindowsHookEx
SetFocus
GetParent
SetWindowTextA
GetClassNameA
CallNextHookEx
GetFocus
SetForegroundWindow
wsprintfA
FindWindowExA
LoadStringA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

shell32

ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA

ole32

CoTaskMemRealloc
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree

oleaut32

LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString
VariantCopy
VariantChangeType
VariantClear
SysAllocString

wininet

InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetSetCookieA
DeleteUrlCacheEntry

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6787a718dfd3be1d675dcf96b9c3d330

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 16KB - Virtual size: 19KB

.SHARED Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 16KB - Virtual size: 19KB

.SHARED
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 12KB - Virtual size: 10KB