46ce0436c28c57d3f3195aebe906c4c8cb067c938148791bfa7ef9392ce9f873

Sharing

Copy URL

Twitter E-mail

General

Target

46ce0436c28c57d3f3195aebe906c4c8cb067c938148791bfa7ef9392ce9f873
Size

660KB
MD5

e4540afd0d65041822e55ccfaa1e7beb
SHA1

7c8a11d5b9d8bf9f6d4ef4a2f722014329303cb2
SHA256

46ce0436c28c57d3f3195aebe906c4c8cb067c938148791bfa7ef9392ce9f873
SHA512

20a46d091b6db7fa6de652180a92c7a55d3ad0311e8932b9492d3bba29270ad84fe6cd08737460a90b310843fc1a4246d7eb6c61ac0e1a87168fe347b6fe2b63
SSDEEP

12288:PO7pIj/qH+Nodr7IBeLik5J52Vqsrg5vaoR+j9DHNntQ9Q26CFx4q:PO7pIjQIYLiuJ5+q9P+nW9Q26CFx4

Score

N/A

Malware Config

Signatures

Files

46ce0436c28c57d3f3195aebe906c4c8cb067c938148791bfa7ef9392ce9f873
.dll regsvr32 windows x86

fa1caefef078775caf9209510ea881c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_isnan
wcsncmp
_wcsnicmp
wcslen
_wcsicmp
_vsnwprintf
free
bsearch
malloc
_onexit
__dllonexit
_adjust_fdiv
_initterm
wcsstr
wcstol
??3@YAXPAX@Z
_finite
srand
rand
_ftol
_purecall
??2@YAPAXI@Z
realloc

user32

ScreenToClient
GetPropW
MonitorFromRect
IntersectRect
EqualRect
PostThreadMessageW
SetWinEventHook
UnhookWinEvent
PeekMessageW
CallNextHookEx
GetWindowInfo
IsChild
SetWindowPos
IsIconic
PostMessageW
GetWindowPlacement
SetWindowPlacement
GetScrollBarInfo
GetScrollInfo
RealGetWindowClassW
RegisterWindowMessageW
SetFocus
SetForegroundWindow
RegisterHotKey
MsgWaitForMultipleObjects
GetMessageW
TranslateMessage
CharNextW
SetWindowsHookExW
UnhookWindowsHookEx
IsWindow
GetDesktopWindow
GetAncestor
SendMessageW
GetParent
GetClassNameW
GetWindowThreadProcessId
SendMessageTimeoutW
IsWinEventHookInstalled
DispatchMessageW
UnregisterHotKey
PtInRect
GetWindowRgn
EnumThreadWindows
GetMenuState
WindowFromPoint
BlockInput
GetCursorPos
GetKeyState
MessageBeep
MapVirtualKeyW
GetSystemMetrics
GetAsyncKeyState
SendInput
GetGUIThreadInfo
GetComboBoxInfo
GetWindowLongW
GetMenuBarInfo
CharLowerW
IsWindowVisible
GetWindowRect
IsWindowEnabled
NotifyWinEvent
GetWindow
LoadStringW
GetClientRect
MapWindowPoints

gdi32

DeleteObject
PtInRegion
CreateRectRgn

kernel32

GlobalDeleteAtom
GlobalAddAtomW
GetModuleHandleExW
LocalFree
LocalAlloc
ExitProcess
VirtualFreeEx
ReadProcessMemory
CompareStringW
GetCurrentThreadId
GetCurrentProcessId
Sleep
GetShortPathNameW
FindResourceW
SizeofResource
lstrlenA
GetCurrentProcess
DisableThreadLibraryCalls
lstrcatW
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrcpyW
lstrlenW
LoadLibraryW
MultiByteToWideChar
SearchPathW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
OpenFileMappingW
IsWow64Process
OutputDebugStringW
OpenProcess
GetTickCount
CreateNamedPipeW
SetNamedPipeHandleState
GetNamedPipeInfo
ReadFile
WaitForMultipleObjects
WriteFile
GetOverlappedResult
ConnectNamedPipe
DisconnectNamedPipe
CancelIo
CreateThread
CreateMutexW
ReleaseMutex
DuplicateHandle
InterlockedExchange
WaitForSingleObject
SetEvent
VirtualAllocEx
lstrcmpW
GetLastError
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
GetVersionExW
FindResourceExW
LoadResource
SetLastError
LoadLibraryExW
MapViewOfFile
CloseHandle
CreateFileMappingW
CreateFileW
GetLocaleInfoW
FreeLibrary
UnmapViewOfFile
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
CreateEventW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoUnmarshalInterface
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoUninitialize
CoInitializeEx
CoInitialize

oleaut32

SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayGetDim
SafeArrayCreateVector
SafeArrayAccessData
SetErrorInfo
SafeArrayUnaccessData
SysStringLen
GetErrorInfo
VariantCopy
SafeArrayCreate
SafeArrayPutElement
SysAllocStringLen
CreateErrorInfo
SafeArrayCopy
VariantClear
SafeArrayDestroy
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
VariantInit
SysFreeString

advapi32

CreateWellKnownSid
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
TraceEvent
InitializeSecurityDescriptor
ImpersonateNamedPipeClient
RevertToSelf
RegDeleteKeyW
CheckTokenMembership
InitializeAcl
SetSecurityDescriptorSacl
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
AllocateAndInitializeSid
FreeSid
UnregisterTraceGuids
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW

oleacc

AccessibleChildren
AccessibleObjectFromWindow
CreateStdAccessibleObject
GetProcessHandleFromHwnd
ObjectFromLresult
LresultFromObject
WindowFromAccessibleObject
PropMgrClient_LookupProp

psapi

GetModuleBaseNameW
GetModuleInformation

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DockPattern_SetDockPosition
ExpandCollapsePattern_Collapse
ExpandCollapsePattern_Expand
GridPattern_GetItem
InvokePattern_Invoke
ItemContainerPattern_FindItemByProperty
LegacyIAccessiblePattern_DoDefaultAction
LegacyIAccessiblePattern_GetIAccessible
LegacyIAccessiblePattern_Select
LegacyIAccessiblePattern_SetValue
MultipleViewPattern_GetViewName
MultipleViewPattern_SetCurrentView
RangeValuePattern_SetValue
ScrollItemPattern_ScrollIntoView
ScrollPattern_Scroll
ScrollPattern_SetScrollPercent
SelectionItemPattern_AddToSelection
SelectionItemPattern_RemoveFromSelection
SelectionItemPattern_Select
SynchronizedInputPattern_Cancel
SynchronizedInputPattern_StartListening
TextPattern_GetSelection
TextPattern_GetVisibleRanges
TextPattern_RangeFromChild
TextPattern_RangeFromPoint
TextPattern_get_DocumentRange
TextPattern_get_SupportedTextSelection
TextRange_AddToSelection
TextRange_Clone
TextRange_Compare
TextRange_CompareEndpoints
TextRange_ExpandToEnclosingUnit
TextRange_FindAttribute
TextRange_FindText
TextRange_GetAttributeValue
TextRange_GetBoundingRectangles
TextRange_GetChildren
TextRange_GetEnclosingElement
TextRange_GetText
TextRange_Move
TextRange_MoveEndpointByRange
TextRange_MoveEndpointByUnit
TextRange_RemoveFromSelection
TextRange_ScrollIntoView
TextRange_Select
TogglePattern_Toggle
TransformPattern_Move
TransformPattern_Resize
TransformPattern_Rotate
UiaAddEvent
UiaClientsAreListening
UiaEventAddWindow
UiaEventRemoveWindow
UiaFind
UiaGetErrorDescription
UiaGetPatternProvider
UiaGetPropertyValue
UiaGetReservedMixedAttributeValue
UiaGetReservedNotSupportedValue
UiaGetRootNode
UiaGetRuntimeId
UiaGetUpdatedCache
UiaHPatternObjectFromVariant
UiaHTextRangeFromVariant
UiaHUiaNodeFromVariant
UiaHasServerSideProvider
UiaHostProviderFromHwnd
UiaLookupId
UiaNavigate
UiaNodeFromFocus
UiaNodeFromHandle
UiaNodeFromPoint
UiaNodeFromProvider
UiaNodeRelease
UiaPatternRelease
UiaRaiseAsyncContentLoadedEvent
UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseStructureChangedEvent
UiaRegisterProviderCallback
UiaRemoveEvent
UiaReturnRawElementProvider
UiaSetFocus
UiaTextRangeRelease
ValuePattern_SetValue
VirtualizedItemPattern_Realize
WindowPattern_Close
WindowPattern_SetWindowVisualState
WindowPattern_WaitForInputIdle

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa1caefef078775caf9209510ea881c0

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

gdi32

kernel32

ole32

oleaut32

advapi32

oleacc

psapi

Exports

Exports

Sections

.text Size: 408KB - Virtual size: 408KB

.data Size: 71KB - Virtual size: 73KB

.rsrc Size: 159KB - Virtual size: 160KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 408KB - Virtual size: 408KB

.data
Size: 71KB - Virtual size: 73KB

.rsrc
Size: 159KB - Virtual size: 160KB

.reloc
Size: 20KB - Virtual size: 19KB