DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
1 signatures
General
-
Target
ActiveSkin.ocx
-
Size
336KB
-
MD5
3d225d8435666c14addf17c14806c355
-
SHA1
262a951a98dd9429558ed35f423babe1a6cce094
-
SHA256
2c8f92dc16cbf13542ddd3bf0a947cf84b00fed83a7124b830ddefa92f939877
-
SHA512
391df24c6427b4011e7d61b644953810e392525743914413c2e8cf5fce4a593a831cfab489fbb9517b6c0e7ef0483efb8aeaad0a18543f0da49fa3125ec971e1
-
SSDEEP
3072:TVKIgW9TkeIu2Yewxx3aGwz3OzT6pe3EhV665fi5sMfkjjyO0DtQo1fPqdXqvbFv:pKIkYPOpeUhV/oCMmjYtRne2LQ
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ActiveSkin.ocx
Files
-
ActiveSkin.ocx.dll regsvr32 windows:4 windows x86 arch:x86
565e1800bc82993fc37d2bbe43963eb1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
GetModuleHandleA
HeapReAlloc
DebugBreak
Sleep
WriteProcessMemory
SetFilePointer
ReadProcessMemory
UnmapViewOfFile
WriteFile
GetACP
GetProcessHeap
HeapFree
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
LoadLibraryA
lstrcatA
lstrcpyA
IsDBCSLeadByte
GetProcAddress
HeapDestroy
LoadLibraryExA
lstrcpynA
lstrcmpiA
LoadResource
GetLastError
FindResourceA
GetModuleFileNameA
SizeofResource
FreeLibrary
GetSystemInfo
GetShortPathNameA
HeapCreate
InitializeCriticalSection
HeapAlloc
DisableThreadLibraryCalls
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
TerminateProcess
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
ExitProcess
RtlUnwind
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
GetStdHandle
GetOEMCP
lstrlenW
GetWindowsDirectoryA
CloseHandle
ReadFile
GetCurrentProcess
TerminateThread
GetFileSize
CreateFileA
lstrlenA
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
user32
MessageBoxA
GetWindowLongA
RedrawWindow
TrackPopupMenu
ShowWindow
LoadBitmapA
WindowFromDC
ReleaseDC
GetDC
IsChild
IsWindow
CharNextA
GetKeyState
SendMessageA
GetMenuItemInfoA
PtInRect
UnionRect
SetWindowRgn
OffsetRect
EqualRect
GetClientRect
PostMessageA
BeginPaint
CallWindowProcA
GetWindowPlacement
GetSysColor
GetWindowTextA
WindowFromPoint
KillTimer
SetCursor
SystemParametersInfoA
SetCapture
GetWindowRgn
GetWindowDC
SetMenu
GetCapture
UpdateWindow
DeleteMenu
InsertMenuItemA
AdjustWindowRect
ReleaseCapture
GetSystemMenu
SetFocus
GetFocus
SetWindowPos
GetWindowRect
InvalidateRect
DestroyWindow
DefWindowProcA
SetWindowLongA
CreateWindowExA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
IntersectRect
EndPaint
SubtractRect
IsRectEmpty
GetDesktopWindow
GetScrollInfo
SetScrollInfo
GetMenu
GetSubMenu
GetSystemMetrics
SetForegroundWindow
GetMessageA
DispatchMessageA
GetMenuItemCount
GetMenuItemID
GetMenuStringA
MoveWindow
SetWindowTextA
GetCursorPos
GetDlgCtrlID
FillRect
GetClassNameA
GetParent
DrawTextA
gdi32
DeleteDC
RestoreDC
SetWindowExtEx
BitBlt
SelectObject
GetDeviceCaps
CreateRectRgnIndirect
CreateCompatibleDC
CloseMetaFile
SetWindowOrgEx
DeleteMetaFile
CreateMetaFileA
SetViewportOrgEx
SaveDC
LPtoDP
CreateDCA
SetMapMode
StretchDIBits
SelectPalette
CreateDIBSection
DeleteObject
SetDIBitsToDevice
SetRectRgn
CreateRectRgn
CombineRgn
OffsetRgn
SetBkColor
TranslateCharsetInfo
SetTextColor
LineTo
SetBkMode
CreatePen
CreateSolidBrush
MoveToEx
Rectangle
GetObjectA
SelectClipRgn
StretchBlt
GetTextExtentPoint32A
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
ole32
StgCreateDocfile
CreateBindCtx
CLSIDFromString
OleLoadFromStream
CreateStreamOnHGlobal
StringFromCLSID
CreateOleAdviseHolder
GetHGlobalFromStream
StgOpenStorage
OleRegGetUserType
OleRegEnumVerbs
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
OleSaveToStream
WriteClassStm
CoCreateInstance
CreateDataAdviseHolder
OleRegGetMiscStatus
oleaut32
SysAllocStringByteLen
OleCreatePictureIndirect
OleLoadPicture
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
OleCreatePropertyFrame
LoadRegTypeLi
SysStringByteLen
VariantChangeType
VariantClear
SysAllocString
SysStringLen
SysAllocStringLen
OleCreateFontIndirect
SysFreeString
comctl32
InitCommonControlsEx
Exports
Exports
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ