f15a29183483958d7310de088029bd1d2874be52ebf317f70b3aa34a8bbf1d47

Sharing

Copy URL Twitter E-mail

General

Target

f15a29183483958d7310de088029bd1d2874be52ebf317f70b3aa34a8bbf1d47
Size

32KB
MD5

054d085c339971ff45a13c5630cb4576
SHA1

286feab824f8e27b2705189f35b72f3f1915b20d
SHA256

f15a29183483958d7310de088029bd1d2874be52ebf317f70b3aa34a8bbf1d47
SHA512

93cb8244bc7696e9112b70e138a3b27dd9a8016e4258e16b15aa0d5af215bc807d05a4467500a38c4c600b930f25a06b46d03a19d59d9b2372059d7d81e9619c
SSDEEP

384:MSmtE9VWsV0ATWuBBQARQklzLdAv1goB33Jz:MSmtshBBQARQkl/mZBn

Score

N/A

Malware Config

Signatures

Files

f15a29183483958d7310de088029bd1d2874be52ebf317f70b3aa34a8bbf1d47
.dll regsvr32 windows x86

c423468aa693848072efb530f7dbdcf1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
OpenEventA
CreateEventA
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
WinExec
VirtualProtect
lstrcatA
IsBadReadPtr
CreateThread
Sleep
GetModuleHandleA
GlobalAlloc
GlobalLock
GetCurrentProcessId
OpenProcess
ReadProcessMemory
InitializeCriticalSection
CloseHandle

user32

CallNextHookEx
SetWindowsHookExA
wsprintfA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey

oleaut32

SysFreeString
LoadRegTypeLi
SysStringLen

atl

ord18
ord15
ord16
ord21
ord57
ord32
ord58
ord30
ord23

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

msvcrt

_adjust_fdiv
_strcmpi
_strlwr
_itoa
malloc
_initterm
free
??2@YAPAXI@Z
_purecall
strlen
strcpy
strstr
memcmp
memset
sscanf
_ftol
strcat
strrchr
memcpy

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c423468aa693848072efb530f7dbdcf1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

atl

wininet

msvcrt

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 884B

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 884B