381450ea527afa3fb12d7bc9bc80627d4d37b3e875646c6bf8d9c536b5226138

General

Target

381450ea527afa3fb12d7bc9bc80627d4d37b3e875646c6bf8d9c536b5226138
Size

11KB
MD5

f9d64f32c92b6d6d03507488032893b5
SHA1

a4cc7258d9b35e3e97a770cc4d81b9e25e55c09b
SHA256

381450ea527afa3fb12d7bc9bc80627d4d37b3e875646c6bf8d9c536b5226138
SHA512

e5e002087fae67844b6eb7e98eec8c894fd765cec08df44d209e531306187872a30f95094a5e3323d3d1da86c4c098be937ca3340ef27561c182d228b66f52e6
SSDEEP

192:gRGO3zwKO8bdctoktzQuggLX2EfPcLX2JgYLMSIygA:uhcmSzrX2EfPMX2JI

Score

N/A

Malware Config

Signatures

Files

381450ea527afa3fb12d7bc9bc80627d4d37b3e875646c6bf8d9c536b5226138
.dll regsvr32 windows x64

4db6e97dff52dd37cbac3e1e35687b5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeFreeStringHandle
DdeClientTransaction
DdeDisconnect
DdeUninitialize
InsertMenuA
wsprintfA

advapi32

RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

DragQueryFileA

ole32

ReleaseStgMedium

msvcrt

malloc
free
_initterm
??3@YAXPEAX@Z
memset
??2@YAPEAX_K@Z

kernel32

lstrcpyA
GlobalLock
GlobalFree
GlobalAlloc
Sleep
CreateProcessA
lstrcatA
lstrcpynA
GlobalUnlock
GetModuleFileNameA
lstrlenA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
GetTickCount
lstrcpynW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4db6e97dff52dd37cbac3e1e35687b5b

Headers

File Characteristics

Imports

user32

advapi32

shell32

ole32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 112B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 112B