DllRegisterServer
Static task
static1
General
-
Target
e918668182864b0bce4d29965e2d4d4250e7453fd71f6381ebbd44dc8bd0ef04
-
Size
317KB
-
MD5
0f1131008c7f6cd6975226af753529cd
-
SHA1
ae2ab7174b0a7bddee5fade79620bdfd014eb9e5
-
SHA256
e918668182864b0bce4d29965e2d4d4250e7453fd71f6381ebbd44dc8bd0ef04
-
SHA512
14e9729b09d8ff9b20235b5df63be153404f0041d8245c6a2f467ff842c2a9cf9379952670b55d004fd05519aa03c1f2ba32b00f92eec14e50af00562553e135
-
SSDEEP
6144:2sCQoj6Fsgyf+pzFqTLY49YyvnUSY8lcJiqjl7JN7mdncXN2:2sCQoj6FsZ+6TLYMMSY82R7J1mqXN
Malware Config
Signatures
Files
-
e918668182864b0bce4d29965e2d4d4250e7453fd71f6381ebbd44dc8bd0ef04.dll regsvr32 windows x64
d872b96f004d4d21c5c8c092d254efc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetConsoleOutputCP
WriteFile
HeapCreate
HeapFree
GetLastError
HeapAlloc
HeapDestroy
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
LoadLibraryW
GetConsoleMode
GetProcAddress
GetModuleHandleW
FreeLibrary
VirtualAlloc
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
GetFileSizeEx
SetFilePointerEx
CreateFileW
WriteConsoleW
CreateThread
GetStartupInfoW
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
user32
DialogBoxParamW
GetDlgItem
GetWindowLongPtrW
SetWindowTextW
SetWindowLongPtrW
SendMessageW
EndDialog
advapi32
RegDeleteKeyW
RegCreateKeyExW
ImpersonateLoggedOnUser
RegSetValueExW
LogonUserW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ole32
CoInitialize
CoLoadLibrary
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
Exports
Exports
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ