005cf38035500b75217db051375060034ded590fa0af47e9f08fb04ad6faa635

General

Target

005cf38035500b75217db051375060034ded590fa0af47e9f08fb04ad6faa635
Size

62KB
MD5

74dba1112cc00e8882f74ee6b23d38c5
SHA1

95e51812040de829fadf121c28383c66cf3185b4
SHA256

005cf38035500b75217db051375060034ded590fa0af47e9f08fb04ad6faa635
SHA512

e6193853e474941f695203ca827344b9d06c5c654986283676354821b8120ef4fb7be821ec11997967c78b59f14110c14ecf9a5a97e47e7aacc7f9d92418b252
SSDEEP

1536:thFPKlUptLJZ/SoUTZ8IxtGcfKtWFBjDq8CI2IkoSILnwnF+sOG:XRKStLn/Soc/mgIlEAIsOG

Score

1^/10

Malware Config

Signatures

Files

005cf38035500b75217db051375060034ded590fa0af47e9f08fb04ad6faa635
.dll regsvr32 windows x86

f6e5ef7171a820db9004d5d76842355c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
WriteFile
GetTempPathW
lstrlenA
CreateFileW
GetFileAttributesW
lstrcatA
Sleep
GetLastError
MoveFileExA
DeleteFileA
DeleteFileW
CloseHandle
CreateThread
SetFileAttributesA
ExitProcess
VirtualFree
VirtualAlloc
SetErrorMode
lstrcpyA
lstrcpynA
VirtualProtect
HeapFree
SetLastError
GetProcessHeap
FreeLibrary
IsBadReadPtr
GetModuleFileNameA
GetCurrentProcess
CreateProcessW
lstrcpyW
MoveFileExW
lstrcatW
SetFileAttributesW
GetModuleFileNameW
lstrlenW
LocalFree
GetProcAddress
LoadLibraryA
lstrcmpA
GetTempFileNameW
LocalAlloc

advapi32

RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExA

ole32

CoUninitialize

Exports

Exports

DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6e5ef7171a820db9004d5d76842355c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 512B - Virtual size: 11KB

.reloc Size: 1024B - Virtual size: 580B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 512B - Virtual size: 11KB

.reloc
Size: 1024B - Virtual size: 580B