38efcebfbd736dc4fdb298f80c0f5e8031843df427631a1ec82aa89aa2f9fc7c

General

Target

38efcebfbd736dc4fdb298f80c0f5e8031843df427631a1ec82aa89aa2f9fc7c
Size

62KB
MD5

17e0784548a2a15db2b5071dede9e2df
SHA1

2553528afffe68d84f1fbffb4af743620dcae4fa
SHA256

38efcebfbd736dc4fdb298f80c0f5e8031843df427631a1ec82aa89aa2f9fc7c
SHA512

357904ac29dc29cd6a0d59fa30ae1b9888749dc1db159e91b94ed01a979e627a9af1f77650e5e52f851b0ea5079518ddd0a789f59a2938e415a7439012ffd17c
SSDEEP

1536:QhFPKlUptLJZ/SoUTZ8IxtGcfKtWFBjDq8CI2IkoSILnwnF+sOG:qRKStLn/Soc/mgIlEAIsOG

Score

1^/10

Malware Config

Signatures

Files

38efcebfbd736dc4fdb298f80c0f5e8031843df427631a1ec82aa89aa2f9fc7c
.dll regsvr32 windows x86

f6e5ef7171a820db9004d5d76842355c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
WriteFile
GetTempPathW
lstrlenA
CreateFileW
GetFileAttributesW
lstrcatA
Sleep
GetLastError
MoveFileExA
DeleteFileA
DeleteFileW
CloseHandle
CreateThread
SetFileAttributesA
ExitProcess
VirtualFree
VirtualAlloc
SetErrorMode
lstrcpyA
lstrcpynA
VirtualProtect
HeapFree
SetLastError
GetProcessHeap
FreeLibrary
IsBadReadPtr
GetModuleFileNameA
GetCurrentProcess
CreateProcessW
lstrcpyW
MoveFileExW
lstrcatW
SetFileAttributesW
GetModuleFileNameW
lstrlenW
LocalFree
GetProcAddress
LoadLibraryA
lstrcmpA
GetTempFileNameW
LocalAlloc

advapi32

RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExA

ole32

CoUninitialize

Exports

Exports

DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6e5ef7171a820db9004d5d76842355c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 512B - Virtual size: 11KB

.reloc Size: 1024B - Virtual size: 580B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 512B - Virtual size: 11KB

.reloc
Size: 1024B - Virtual size: 580B