d219d79122971c0d98a65634a115dd2577fba5df8d5a532a4c168590f36e2fa8

Sharing

Copy URL Twitter E-mail

General

Target

d219d79122971c0d98a65634a115dd2577fba5df8d5a532a4c168590f36e2fa8
Size

68KB
MD5

97c88aba0c916de78e9247f879e1b375
SHA1

2fc2ea65b0c43538b799da099581acef305f7838
SHA256

d219d79122971c0d98a65634a115dd2577fba5df8d5a532a4c168590f36e2fa8
SHA512

1b26e9a8400718cf4847263859caa8e0dc47e2bfae4c1a935a1fd849888e79e800a10d5d8d65fed1a06503e49d08d99177ded4a804bde3428dbf549e4adb1fa4
SSDEEP

768:A0bN7znbuREoabujoMwfEsDowDbDwbkicRNnkRm+2/myIu4MWvC1ttWfpe:rbNL04cGZwnkkRmjv4wttWfp

Score

N/A

Malware Config

Signatures

Files

d219d79122971c0d98a65634a115dd2577fba5df8d5a532a4c168590f36e2fa8
.dll regsvr32 windows x86

bb3bc53cedadf33979a9cc7a2d3457ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW
StrStrIW

oleaut32

SysAllocString
VariantInit
SysFreeString

ole32

CoInitializeEx

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

shell32

SHGetFolderPathW

kernel32

GetStdHandle
GetLocaleInfoA
GetFileSize
WriteFile
ReadFile
GetModuleFileNameW
CreateFileW
CloseHandle
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InitializeCriticalSection
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb3bc53cedadf33979a9cc7a2d3457ca

Headers

File Characteristics

Imports

shlwapi

oleaut32

ole32

advapi32

shell32

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 6KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 6KB

.reloc
Size: 8KB - Virtual size: 4KB