d82452bc7cd13d8d54ec1f9d0067a5daade2f399aa0e377a639521522432c2fc

Sharing

Copy URL Twitter E-mail

General

Target

d82452bc7cd13d8d54ec1f9d0067a5daade2f399aa0e377a639521522432c2fc
Size

276KB
MD5

23f99f7b53ca84e001d622fb4a461380
SHA1

a9c028779681cfd7096020dee31933a80c84fa11
SHA256

d82452bc7cd13d8d54ec1f9d0067a5daade2f399aa0e377a639521522432c2fc
SHA512

b693fe2105510cdd996c5f966df9821b2f4fc93081b90e717ed12bdf2518e22405b6b070921f4c12531f1112c0e7240bb909917c3576ef83032627b0e0c2c029
SSDEEP

3072:aULKG0/PrcgvLv0ce2YNao8vXsO1TvVL:aU/Qrc9b8fsO1T

Score

N/A

Malware Config

Signatures

Files

d82452bc7cd13d8d54ec1f9d0067a5daade2f399aa0e377a639521522432c2fc
.dll regsvr32 windows x86

c0fca5ef218c61f7b8c153d2d620938b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
InterlockedExchange
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
LockResource
LocalFree
MulDiv
LocalAlloc
GetTickCount
lstrcpyA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
OutputDebugStringA
WritePrivateProfileStringA
GetPrivateProfileStringA
FormatMessageA
FreeResource
LocalReAlloc
LocalSize
GetModuleHandleW
LocalLock
lstrcpynA
LoadLibraryA
SetErrorMode
CreateDirectoryA
GetFileAttributesA
GetShortPathNameA
DeleteFileA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetProcAddress
GetModuleFileNameA
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
LocalUnlock

user32

ReleaseDC
GetDC
ScreenToClient
GetClientRect
GetWindowRect
SetWindowPos
GetWindowTextA
SetWindowTextA
SendMessageA
SetWindowLongA
MsgWaitForMultipleObjects
CharNextA
IsWindow
GetSystemMetrics
DestroyWindow
CreateWindowExA
GetWindowTextLengthA
CreateDialogParamA
PostMessageA
IsWindowEnabled
SetRect
SystemParametersInfoA
GetParent
PeekMessageA
DispatchMessageA
TranslateMessage
DefWindowProcA
GetWindowLongA
PostQuitMessage
CreateDialogIndirectParamA
LoadStringA
LoadCursorA
RegisterClassA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
wsprintfA
IsIconic
CharNextW
GetDlgItem
EnableWindow
ShowWindow
UnregisterClassA

gdi32

GetTextMetricsA
GetDeviceCaps
CreateFontIndirectA
GetStockObject
SelectObject
GetObjectA
GetTextExtentPoint32A

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CreateFileMoniker
CoGetInstanceFromFile
ProgIDFromCLSID
CreateBindCtx
MkParseDisplayName
GetRunningObjectTable
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

CreateErrorInfo
SetErrorInfo
VarBstrCat
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
DispCallFunc
VariantInit
VariantCopy
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
VariantClear
SysFreeString
SysStringLen

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_except_handler4_common
memmove_s
_ltoa_s
atol
isxdigit
iswctype
_mbschr
toupper
_chdrive
_chdir
_getcwd
atoi
_beginthreadex
_mbsrchr
_invalid_parameter_noinfo
calloc
_recalloc
_purecall
_resetstkoflw
??2@YAPAXI@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memset
strcat_s
wcsncpy_s
strcpy_s
_CxxThrowException
memcpy_s
malloc
_mbsstr
_mbsnbcpy_s
memcmp
??3@YAXPAX@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
free
wcscpy_s
__clean_type_info_names_internal

Exports

Exports

?COMWndProc@@YGJPAUHWND__@@IIJ@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 170KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0fca5ef218c61f7b8c153d2d620938b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 170KB - Virtual size: 171KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 170KB - Virtual size: 171KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 6KB - Virtual size: 5KB