a3935e25480c409cdddd14ba456d08ac847edc87d0df796bc788ced3998bcf2c

Sharing

Copy URL Twitter E-mail

General

Target

a3935e25480c409cdddd14ba456d08ac847edc87d0df796bc788ced3998bcf2c
Size

140KB
MD5

75140dd6d5457c30487939b6edeb561c
SHA1

3486cdb063366d296cf25cbf98163b3542709ab8
SHA256

a3935e25480c409cdddd14ba456d08ac847edc87d0df796bc788ced3998bcf2c
SHA512

b4ef6552be2b27bad0a372480f9ceab3ec3bf8ecaa1733cd80ff4ad8355ca5814a74b44d1a09ad604547d430f4a5c9b9a87bbfb28fa3e50e84dbebbadb98ceea
SSDEEP

3072:asPr/coWB9501BicJOQ5Qy7kAQXFfQ3wCD4XOiwpqiwHBdKHUM0FqqbkTr3zOGmy:asPr/coWB9501BicJOQ5Qy7kAQXFfQ3U

Score

N/A

Malware Config

Signatures

Files

a3935e25480c409cdddd14ba456d08ac847edc87d0df796bc788ced3998bcf2c
.dll regsvr32 windows x86

7c854b2b41b8a558a92dc5d788e18fa9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
VirtualAlloc

user32

AllowSetForegroundWindow

oleaut32

SysFreeString
SysAllocString
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize

rpcrt4

NdrDllUnregisterProxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrClientCall2
NdrStubCall2
NdrStubForwardingFunction
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy

ole32

HWND_UserUnmarshal
HWND_UserMarshal
HWND_UserSize
HWND_UserFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c854b2b41b8a558a92dc5d788e18fa9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

rpcrt4

ole32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 20KB

.orpc Size: 4KB - Virtual size: 688B

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 20KB

.orpc
Size: 4KB - Virtual size: 688B

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 4KB - Virtual size: 2KB