eea28a5dc718043314109bd2dcc083c2d4d46d82e92b4f7e657f1131c8497641

Sharing

Copy URL

Twitter E-mail

General

Target

eea28a5dc718043314109bd2dcc083c2d4d46d82e92b4f7e657f1131c8497641
Size

788KB
MD5

60903297667d71f88fb1cc337c5ffc8f
SHA1

8dd6d9e618a6cec19d06394c633a733a52e436d7
SHA256

eea28a5dc718043314109bd2dcc083c2d4d46d82e92b4f7e657f1131c8497641
SHA512

a1a3e324c30a4d9d38cf2c7cd11d86587902b4905f11c06b7631899317414028b31a41db67b43294c8d85d62ffe5066a2799d4b1a356589c334cef7d4a0c84b4
SSDEEP

12288:aKJGD91Y+oskxcegrSeRfglwxr+OhlKDlrgH8QkkQi:aGGjYX7crFgLOhMJrefk

Score

N/A

Malware Config

Signatures

Files

eea28a5dc718043314109bd2dcc083c2d4d46d82e92b4f7e657f1131c8497641
.dll regsvr32 windows x86

a9abc2b6a93e822b3ec4538d33928150

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenUrlA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetCrackUrlA
InternetGetConnectedState
InternetCanonicalizeUrlA
InternetCreateUrlA

kernel32

WaitForSingleObject
CreateProcessA
IsBadWritePtr
GetTickCount
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
SetEnvironmentVariableA
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
IsValidCodePage
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
GetACP
ExpandEnvironmentStringsA
SetFileAttributesA
IsDBCSLeadByteEx
GetSystemDirectoryA
GetVolumeInformationA
CreateThread
GetExitCodeProcess
WriteFile
ResetEvent
GetFileSize
ReadFile
GetWindowsDirectoryA
GetFileAttributesA
CreateFileA
CreateDirectoryA
ReleaseMutex
GetVersionExA
FindResourceA
FindResourceExA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
lstrlenA
FormatMessageA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetUserDefaultLangID
GetSystemDefaultLangID
Sleep
CreateMutexA
CloseHandle
CompareStringW
CompareStringA
InterlockedExchange
GlobalHandle
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
lstrcmpA
GlobalAlloc
InterlockedCompareExchange
DisableThreadLibraryCalls
FreeLibrary
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
LoadLibraryExA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
lstrlenW
GetCommandLineA
GetDateFormatA
GetTimeFormatA
CreateEventA
GetProcAddress
GetFileAttributesW
LocalAlloc
GetVersion
RaiseException
FlushInstructionCache
GetCurrentProcess
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
SetEvent
DeleteFileA
GetCurrentThreadId
OutputDebugStringA

user32

LoadMenuA
InsertMenuItemA
SetMenuItemInfoA
LoadImageA
MessageBoxA
GetWindowLongA
GetParent
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
UnregisterClassA
SetWindowPlacement
FindWindowExA
EnableMenuItem
CheckMenuItem
GetMenuItemInfoA
RemoveMenu
GetMenuItemCount
DestroyMenu
CreatePopupMenu
TrackPopupMenu
GetCursorPos
DrawTextA
DrawStateA
AnimateWindow
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoA
GetAncestor
CopyIcon
DestroyIcon
OffsetRect
PostMessageA
RegisterWindowMessageA
CreateAcceleratorTableA
DestroyAcceleratorTable
BeginPaint
EndPaint
ReleaseCapture
SetCapture
CreateDialogParamA
InvalidateRgn
GetSysColor
SetWindowContextHelpId
MapDialogRect
EndDialog
GetDC
GetSystemMetrics
DialogBoxIndirectParamA
SetFocus
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
GetComboBoxInfo
FillRect
IsChild
GetForegroundWindow
ShowWindow
CharNextA
SetWindowsHookExA
GetFocus
CallNextHookEx
GetClassNameA
UnhookWindowsHookEx
EndMenu
MoveWindow
GetKeyState
ReleaseDC
GetWindowDC
ScreenToClient
ClientToScreen
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SetActiveWindow
GetDesktopWindow
IsWindowEnabled
EnableWindow
SendMessageA
IsWindow
IsWindowVisible
CallWindowProcA
DefWindowProcA
CreateWindowExA
GetClassInfoExA
RegisterClassExA
DestroyWindow
LoadCursorA
KillTimer
SetTimer
SetWindowLongA
LoadStringA
SetWindowTextA
GetWindow
GetWindowRect
SystemParametersInfoA
GetWindowPlacement
IsIconic
DrawFrameControl
UpdateWindow
SetWindowRgn
IsRectEmpty
PtInRect
SetRectEmpty
CopyRect
InflateRect
DrawIconEx
SetCursor
GetCapture
UnionRect
DialogBoxParamA
RedrawWindow

gdi32

LPtoDP
DPtoLP
StretchBlt
OffsetRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
GetClipBox
CreateRectRgn
SetStretchBltMode
SetWindowOrgEx
FrameRgn
GetViewportOrgEx
SetViewportOrgEx
ExcludeClipRect
EqualRgn
GetTextExtentPoint32A
RestoreDC
SaveDC
Polygon
CreatePen
SetTextColor
ExtTextOutA
GetPixel
GetTextColor
CreateFontIndirectA
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SetBrushOrgEx
SetBkMode
SetBkColor
SelectObject
DeleteObject
CreatePatternBrush
CreateSolidBrush
GetTextMetricsA
DeleteDC

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

CLSIDFromProgID
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
CoLoadLibrary
CoFreeUnusedLibraries
RegisterDragDrop
OleUninitialize
OleInitialize
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromString
OleLockRunning
CoGetClassObject
CoUninitialize
CoInitialize
OleDraw
RevokeDragDrop
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnlock
SafeArrayLock
SysFreeString
VariantInit
VariantClear
VariantCopy
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VarBstrCat
SafeArrayCreate
GetErrorInfo
LoadRegTypeLi
LoadTypeLi
DispCallFunc
SysStringLen
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
OleCreateFontIndirect
VariantChangeType
VarBstrCmp
SetErrorInfo
CreateErrorInfo
SafeArrayDestroy

shlwapi

UrlUnescapeA
PathFileExistsA
StrStrIW
StrStrW
PathRemoveFileSpecA
PathRemoveBackslashA

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_Draw

msimg32

TransparentBlt

snmpapi

SnmpUtilOidNCmp
SnmpUtilOidCpy
SnmpUtilVarBindFree

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 440KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9abc2b6a93e822b3ec4538d33928150

Headers

File Characteristics

Imports

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

snmpapi

version

Exports

Exports

Sections

.text Size: 440KB - Virtual size: 437KB

.rdata Size: 108KB - Virtual size: 107KB

.data Size: 28KB - Virtual size: 112KB

.SHARED Size: 4KB - Virtual size: 8B

.rsrc Size: 156KB - Virtual size: 154KB

.reloc Size: 48KB - Virtual size: 46KB

.text
Size: 440KB - Virtual size: 437KB

.rdata
Size: 108KB - Virtual size: 107KB

.data
Size: 28KB - Virtual size: 112KB

.SHARED
Size: 4KB - Virtual size: 8B

.rsrc
Size: 156KB - Virtual size: 154KB

.reloc
Size: 48KB - Virtual size: 46KB