General

Malware Config

Signatures

Files

• aaa.zip

  .zip .ps1

  Password: haha

• 44ad0656ef0e7e356ad7a37992d81bb2832fd6f7d420a9502627a77c43f8f8d0

  .dll windows x64 regsvr32

  
  

  Exports

  Exports

  DllRegisterServer

  DoPathIsLFNFileSpecW

  DoVarI2FromI8

  GetPathCanonicalizeA

  GetPathGetArgsA

  GetPathIsSlowA

  GetPathRemoveBlanksW

  HasPathIsRootA

  HasSHFileOperationW

  HasSHGetIconOverlayIndexA

  HasSHUpdateRecycleBinIcon

  HasVarDecFromDate

  HaveChrCmpIA

  HaveInternalExtractIconListW

  HavePathIsUNCW

  HaveReadCabinetState

  HaveSHQueryInfoKeyA

  HaveVarUI1FromUI8

  IsSHSetLocalizedName

  IsStrNCmpIW

  PutColorRGBToHLS

  PutHashData

  PutILGetNext

  PutLoadRegTypeLib

  PutPathAppendW

  PutPathQuoteSpacesA

  PutSHEnumerateUnreadMailAccountsW

  PutSafeArrayCreateEx

  PutStrNCatA

  PutStrPBrkA

  PutStrToIntA

  PutVarDecFromI2

  PutVarI4FromI2

  PutVarI8FromDec

  SetControl_FillCache_RunDLLW

  SetLPSAFEARRAY_UserMarshal64

  SetSHGetSpecialFolderPathW

  SetSHRegSetUSValueA

  SetShellExecuteExW

  SetVarDiv

  SetVarNumFromParseNum

  SetVarUI2FromDec

• 63e28585c6bf3c79b7f7c8c53533f3e0500ced3535ab1d6ffabb294a932c281b

  .exe windows x86

  
  
• 77d426d73e3aeef4eb5f1ccf5e3815f52af9c4d6b86d43cc5533548a0ab764f7

  .exe windows x86

  
  
• 7b79f71dab448bf9fb7e6686894fbb342bacdfe6e058a0d0efbf3453fa366da8

  .exe windows x86

  
  
• 95cff1b536234f6cb1b3682bf4d88a3b4583710450652a9d928f67149f1208b3

  .exe windows x86

  
  
• c2ed23b08dc766bf925748880bbf70a63516caba3f8646418bca231488708d6c

  .exe windows x86

  
  
• d10a043f50b47c93c7bdd522d777d62b6034134605449465c2cd3e66958be4fd

  .exe windows x86

  
  
• e265a0c4cb17501c0c96d3b9c996c27a6cb3479d20802c90ed9535d8e31075ed

  .exe windows x86