9ac6f4a42b50e75f2cc362c48033a6d1a881e5daac2f7e9ce57b45a7c1d05b61

Sharing

Copy URL Twitter E-mail

General

Target

9ac6f4a42b50e75f2cc362c48033a6d1a881e5daac2f7e9ce57b45a7c1d05b61
Size

80KB
MD5

d68051c6d37953e91c5fc578762507c7
SHA1

9afdfc192b4f1c19df93ba3052c483a089fde28b
SHA256

9ac6f4a42b50e75f2cc362c48033a6d1a881e5daac2f7e9ce57b45a7c1d05b61
SHA512

4a9487d4941112abd9433616796289e0cc9ce82795d055158a080080b9e31b33c562f51729c5f9f30aede4409b5b2eb3a539e90d902a292debce2f917e58471f
SSDEEP

1536:gZwLq5EGgdsP/wzqW71Bwwm1w6vKICS4AdZJf5nQ6NLaYf:MgqlT/WkwmrTZJf5nQHYf

Score

N/A

Malware Config

Signatures

Files

9ac6f4a42b50e75f2cc362c48033a6d1a881e5daac2f7e9ce57b45a7c1d05b61
.dll regsvr32 windows x86

45e488c73c13e4853866303fb3856796

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

Netbios

ole32

CoInitialize
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree

advapi32

SetEntriesInAclA
SetSecurityInfo
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetSecurityInfo

psapi

EnumProcesses
GetModuleBaseNameA
EnumProcessModules

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

oleaut32

VariantClear
SysAllocString
SysFreeString
GetErrorInfo

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetSetOptionA
InternetCloseHandle
InternetOpenUrlA

shlwapi

StrStrIA
SHGetValueA
SHSetValueA

winmm

timeGetTime

user32

KillTimer
SetTimer
EnumWindows
EnumChildWindows
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
GetWindowThreadProcessId
GetClassNameA
wsprintfA
SetWindowPos
CreateWindowExA
RegisterClassExA
SystemParametersInfoA
DefWindowProcA

msvcrt

_CxxThrowException
_adjust_fdiv
_initterm
malloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
strstr
tolower
isalpha
strerror
isxdigit
__CxxFrameHandler
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
_stricmp
??1exception@@UAE@XZ
wcslen
wcscmp
printf
srand
islower
isupper
strchr
toupper
strtok
fclose
fwrite
fopen
tmpnam
atoi
__dllonexit
_onexit
??1type_info@@UAE@XZ

rpcrt4

UuidToStringA

kernel32

GetSystemDirectoryA
GetLocalTime
CreateProcessA
DeleteFileA
lstrcpyA
WaitForSingleObject
MoveFileExA
CreateFileA
SetLastError
GetFullPathNameA
lstrcpynA
FormatMessageA
LocalFree
SleepEx
GetVersionExA
GetCurrentProcessId
QueryPerformanceFrequency
DisableThreadLibraryCalls
HeapAlloc
HeapSize
GetLastError
lstrlenA
GetProcessHeap
MultiByteToWideChar
GetVersion
GetModuleHandleA
GetModuleFileNameA
HeapFree
GetSystemInfo
GetCurrentThread
Sleep
GetThreadTimes
LoadLibraryA
OpenProcess
VirtualAllocEx
GetProcAddress
WriteProcessMemory
CreateRemoteThread
CloseHandle
FreeLibrary
GetTickCount
QueryPerformanceCounter

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45e488c73c13e4853866303fb3856796

Headers

File Characteristics

Imports

netapi32

ole32

advapi32

psapi

version

oleaut32

wininet

shlwapi

winmm

user32

msvcrt

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 12KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 12KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 2KB