ca53bfdf406789fb5b102943c1a0f31086a69463760417f2fc3a3484e05385eb

Sharing

Copy URL Twitter E-mail

General

Target

ca53bfdf406789fb5b102943c1a0f31086a69463760417f2fc3a3484e05385eb
Size

220KB
MD5

334ae05aa2527f4ad40ee4288269af1f
SHA1

3c85a672a252e0d97e12a488a440e993970112bf
SHA256

ca53bfdf406789fb5b102943c1a0f31086a69463760417f2fc3a3484e05385eb
SHA512

978dbf512eebd1f206e097cbc84fb22a3869493833c3370ac41485f03e7b0d56c2c5781ccfe29cf09566db659bf224ef6a814e3ed831ed16cf4914a8decba62f
SSDEEP

3072:3NHHnBntNwlLHqjZqMNRq4fEBm9hgI9Rqfv+NnLiuS4X6J42epd1yndc:3JHp4lLHmv3EB6vNnLopqd1ydc

Score

N/A

Malware Config

Signatures

Files

ca53bfdf406789fb5b102943c1a0f31086a69463760417f2fc3a3484e05385eb
.dll regsvr32 windows x86

cbb2448265c8ccc4de2bf9154a176437

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA

gdi32

GetStockObject

shell32

Shell_NotifyIconA

kernel32

ExitProcess
QueryPerformanceCounter
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
LocalFree
lstrcpyA
lstrcpynA
lstrlenA
WinExec
GetModuleFileNameA
SetEvent
CloseHandle
WaitForSingleObject
CreateThread
ResetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
GetProcAddress
SetEnvironmentVariableA
lstrcatA
WriteConsoleA
GetStdHandle
FreeLibrary
FreeConsole
LoadLibraryA
GetModuleHandleA
FindClose
FindFirstFileA
GetWindowsDirectoryA
GlobalMemoryStatus
lstrcmpA
AllocConsole
MultiByteToWideChar
GetShortPathNameA
lstrcmpiA
WideCharToMultiByte
CreateFileA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetLastError
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
IsDBCSLeadByte
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId

user32

GetWindowRect
FindWindowExA
LoadStringA
LoadImageA
PostMessageA
CharNextA
RegisterClassA
CreateWindowExA
ShowWindow
SetWindowLongA
GetMessageA
TranslateMessage
DispatchMessageA
GetWindowLongA
MessageBoxA
DefWindowProcA
PostQuitMessage
DestroyWindow
wsprintfA
CreatePopupMenu
AppendMenuA
SetMenuItemInfoA
GetCursorPos
SetForegroundWindow
TrackPopupMenu

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
OleRun

oleaut32

VarUI4FromStr
VariantClear
VariantInit
SysAllocString
GetErrorInfo

msvcr71

strtok
strchr
strncmp
memmove
__security_error_handler
__CppXcptFilter
malloc
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
memset
getenv
_stricmp
_local_unwind2
_resetstkoflw
fopen
fclose
fgetc
wcslen
??_U@YAPAXI@Z
sprintf
strstr
strtol
strncat
strrchr
_stat
vsprintf
realloc
perror
exit
_CxxThrowException
??2@YAPAXI@Z
_except_handler3
free
??3@YAXPAX@Z
??_V@YAXPAX@Z
__CxxFrameHandler
_purecall

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cbb2448265c8ccc4de2bf9154a176437

Headers

File Characteristics

Imports

advapi32

gdi32

shell32

kernel32

user32

ole32

oleaut32

msvcr71

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 20KB

.rsrc Size: 56KB - Virtual size: 52KB

.reloc Size: 8KB - Virtual size: 4KB

.text Size: 96KB - Virtual size: 96KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 20KB

.rsrc
Size: 56KB - Virtual size: 52KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 96KB - Virtual size: 96KB