General

Malware Config

Signatures

Files

• 75016c7b700abe6cba6192b6c8f28023

  .dll regsvr32 windows:5 windows x86 arch:x86

  0df0b6e1af330aad32cc1981001791f6

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  rpcrt4

  UuidToStringW

  RpcStringFreeW

  version

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  VerQueryValueW

  shlwapi

  StrStrIW

  StrCmpIW

  SHDeleteKeyW

  SHSetValueW

  UrlEscapeW

  kernel32

  GetStringTypeW

  GetStringTypeA

  LCMapStringA

  GetLocaleInfoA

  HeapSize

  lstrlenW

  CloseHandle

  SetEvent

  CreateProcessW

  GetProcAddress

  LoadLibraryW

  ExitThread

  WaitForSingleObject

  CreateThread

  CreateEventW

  OpenProcess

  Sleep

  GetModuleFileNameW

  CreateMutexW

  GetSystemTime

  GlobalFree

  GlobalAlloc

  LocalFree

  LocalAlloc

  InterlockedIncrement

  InterlockedDecrement

  lstrcmpW

  SystemTimeToFileTime

  GetLocalTime

  LoadLibraryA

  FreeLibrary

  WideCharToMultiByte

  MultiByteToWideChar

  GetTempFileNameW

  GetTickCount

  GetEnvironmentVariableW

  VirtualQuery

  GetVolumeInformationW

  GetWindowsDirectoryW

  GetSystemInfo

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  HeapReAlloc

  VirtualAlloc

  EnterCriticalSection

  LeaveCriticalSection

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  QueryPerformanceCounter

  VirtualFree

  HeapDestroy

  HeapCreate

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  DeleteCriticalSection

  GetStartupInfoA

  GetFileType

  SetHandleCount

  ExitProcess

  LCMapStringW

  IsValidCodePage

  GetOEMCP

  GetACP

  InitializeCriticalSectionAndSpinCount

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CreateFileA

  FlushFileBuffers

  ExpandEnvironmentStringsW

  GetCPInfo

  GetModuleFileNameA

  GetStdHandle

  WriteFile

  GetModuleHandleA

  SetLastError

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  GetModuleHandleW

  HeapAlloc

  HeapFree

  GetLastError

  GetCommandLineA

  GetCurrentThreadId

  RaiseException

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlUnwind

  user32

  GetWindowTextW

  EnumChildWindows

  RealGetWindowClassW

  CallWindowProcW

  SetWindowLongW

  SetPropW

  SetWindowPos

  SetActiveWindow

  PostMessageW

  SetCursorPos

  GetWindowThreadProcessId

  GetPropW

  SendInput

  SetWindowTextW

  EnumWindows

  GetSystemMetrics

  GetWindowInfo

  GetWindowRect

  TranslateMessage

  RemovePropW

  MsgWaitForMultipleObjects

  DispatchMessageW

  GetCursorPos

  GetClassNameW

  SendMessageW

  PeekMessageW

  advapi32

  CryptAcquireContextW

  CryptCreateHash

  CryptHashData

  CryptGetHashParam

  CryptDestroyHash

  CryptGenRandom

  CryptReleaseContext

  RegQueryValueExW

  RegCreateKeyW

  RegDeleteValueW

  RegOpenKeyExW

  RegSetValueExW

  RegCloseKey

  ole32

  CoInitializeEx

  CoCreateInstance

  CoUninitialize

  CoTaskMemFree

  oleaut32

  VariantChangeType

  VariantCopy

  SafeArrayCreateVector

  SafeArrayPutElement

  SafeArrayDestroy

  SysAllocString

  VariantClear

  VariantInit

  SysAllocStringLen

  SysFreeString

  SysStringLen

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllStub

  DllUnregisterServer

  Sections

  .text

  Size: 122KB - Virtual size: 121KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 880B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ