a8ba48c6efefd08254016a684418933155f590b8041f75b62d63722c7ce96925

Sharing

Copy URL Twitter E-mail

General

Target

a8ba48c6efefd08254016a684418933155f590b8041f75b62d63722c7ce96925
Size

140KB
MD5

afc69cc7d3d7c22743c0e68ef1de4e6a
SHA1

b665b7e121f1c7c886b5cc93f7f9063413dd00c6
SHA256

a8ba48c6efefd08254016a684418933155f590b8041f75b62d63722c7ce96925
SHA512

bf63776eab6204e6b5f8062fe9e07a78f033d9f729c03bb5aa213d30daac58e8d2ba09606480539aa1ba41392cee9c67930a6791e136db93e2d15098598eebeb
SSDEEP

3072:D3BWcSZPg/fb2q1wWOHd7IV36lWpFgsEfQ9:D3BWcsAdwW+7IV36Mngsge

Score

N/A

Malware Config

Signatures

Files

a8ba48c6efefd08254016a684418933155f590b8041f75b62d63722c7ce96925
.dll regsvr32 windows x86

d00bdfbf9f57dcbb8a80a384e93f5c3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
RtlUnwind

rpcrt4

NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrProxyErrorHandler
NdrClearOutParameters
NdrProxyFreeBuffer
NdrPointerUnmarshall
NdrConvert
NdrProxySendReceive
NdrOleFree
NdrProxyGetBuffer
NdrSimpleStructBufferSize
RpcRaiseException
NdrProxyInitialize
NdrPointerFree
NdrPointerMarshall
NdrStubGetBuffer
NdrPointerBufferSize
NdrSimpleStructUnmarshall
NdrStubInitialize
NdrInterfacePointerMarshall
NdrInterfacePointerBufferSize
NdrInterfacePointerFree
NdrInterfacePointerUnmarshall
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrSimpleStructMarshall

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.orpc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 834B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d00bdfbf9f57dcbb8a80a384e93f5c3b

Headers

File Characteristics

Imports

kernel32

rpcrt4

Exports

Exports

Sections

.orpc Size: 8KB - Virtual size: 4KB

.text Size: 4KB - Virtual size: 834B

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 44B

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 4KB - Virtual size: 744B

.text Size: 108KB - Virtual size: 108KB

.orpc
Size: 8KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 834B

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 44B

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 4KB - Virtual size: 744B

.text
Size: 108KB - Virtual size: 108KB