e4651552ab1101898401b6115b1dd652fe6fc06feef9e003182524e3de656c21

Sharing

Copy URL Twitter E-mail

General

Target

e4651552ab1101898401b6115b1dd652fe6fc06feef9e003182524e3de656c21
Size

211KB
MD5

2f614d044b9d88f2de35a731d59658d0
SHA1

3225077af8de3017d96d4d8f0df571e65bb90523
SHA256

e4651552ab1101898401b6115b1dd652fe6fc06feef9e003182524e3de656c21
SHA512

bee1237db505e932fc4ca056009b2212a94778666425f98be462426d2d8384e68070811245d83aee425c88cdc342cb52eafae2ddca123474e67c816089d72dbf
SSDEEP

6144:J4sspx/zHtG8Zh91iGVPl5rAK7lweR2zdppoG:Hsp+8nisPlRl7lh2zFo

Score

N/A

Malware Config

Signatures

Files

e4651552ab1101898401b6115b1dd652fe6fc06feef9e003182524e3de656c21
.dll regsvr32 windows x86

21ed6cedeb9a73333c64d761caf78d86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_adjust_fdiv
_initterm
_CxxThrowException
??3@YAXPAX@Z
wcsrchr
wcschr
wcslen
_purecall
_wcsnicmp
??2@YAPAXI@Z
realloc
free
malloc
__CxxFrameHandler
_except_handler3
_callnewh

msvcp60

?nothrow@std@@3Unothrow_t@1@B
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ

kernel32

Sleep
HeapFree
HeapAlloc
RaiseException
InterlockedExchange
HeapCreate
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CreateFileMappingW
CloseHandle
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
LocalFree
LocalAlloc
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
FreeLibrary
GetVersionExW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
MultiByteToWideChar
lstrlenW
lstrcpyW
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
lstrcpynW
GetSystemDirectoryW
LoadLibraryExW
lstrcatW
DisableThreadLibraryCalls
lstrlenA
SizeofResource
LoadResource
FindResourceW
LoadLibraryA
WideCharToMultiByte
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileW

user32

CopyImage
CopyIcon
LoadImageW
CharNextW
CharPrevW
DestroyIcon

ole32

CLSIDFromString
StgOpenStorage
CreateStreamOnHGlobal
StringFromCLSID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VarUI4FromStr
SysStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString

advapi32

RegEnumKeyExW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
TraceEvent

hhsetup

?AddTitle@CCollection@@QAEPAVCTitle@@PBG0000GIPAVCLocation@@PAKH0@Z
?AddFolder@CCollection@@QAEPAVCFolder@@PBGKPAKG@Z
?RemoveCollection@CCollection@@QAEKH@Z
?Close@CCollection@@QAEKXZ
?Open@CCollection@@QAEKPBG@Z
??0CCollection@@QAE@XZ
??1CCollection@@QAE@XZ
?Save@CCollection@@QAEKXZ

Exports

Exports

ServiceMain
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21ed6cedeb9a73333c64d761caf78d86

Headers

File Characteristics

Imports

msvcrt

msvcp60

kernel32

user32

ole32

oleaut32

advapi32

hhsetup

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 46KB

.data Size: 1KB - Virtual size: 3KB

.rsrc Size: 156KB - Virtual size: 156KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 46KB

.data
Size: 1KB - Virtual size: 3KB

.rsrc
Size: 156KB - Virtual size: 156KB

.reloc
Size: 5KB - Virtual size: 4KB