IT8GHjQ[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
IT8GHjQ.dll
Size 624KB
Sample220121-lerkxaefdr
SHA256 c1254259ee85998dfb96c19c1f01fc892603bdd55a11368e10938bdd4e972255
MD5 832e664a4889855375c5243c8e57c184
SHA1 49b9153bf82e043c5e2bf510a3fe1fef568b44b6
SHA512 cf08974d86ab55397101ce7f7e7a6c360ca9ccabb924bfd73cf31f5b2c1301507afb171eb5a46767784f63ca9d0fe85ab0fe20443958f212171e947730e38263
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9NSG1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDcVn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

IT8GHjQ.dll

.dll 624KB

IT8GHjQ.dll

IMPHASH 42bfc936e90bcc6f5b01541917ef37a4
SHA256 c1254259ee85998dfb96c19c1f01fc892603bdd55a11368e10938bdd4e972255
MD5 832e664a4889855375c5243c8e57c184
SHA1 49b9153bf82e043c5e2bf510a3fe1fef568b44b6
SHA512 cf08974d86ab55397101ce7f7e7a6c360ca9ccabb924bfd73cf31f5b2c1301507afb171eb5a46767784f63ca9d0fe85ab0fe20443958f212171e947730e38263
SSDEEP 12288:Td0saabmsb61ZuV3ZGuyfEgXkvPLEbsWrxD8iP29pi9NSG1DjsgqXXvhhcwEPwq:68mi61ZuRZGuyfEgXkvPLEbsODYDcVn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

95798

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA ExitProcess RtlUnwind TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement MulDiv FormatMessageA LocalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA CloseHandle GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetTickCount GetCurrentThread GlobalAlloc lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetModuleFileNameA SizeofResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FindResourceA LoadResource LockResource FreeResource GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA HeapFree GetProcessHeap HeapAlloc GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree UnhandledExceptionFilter VirtualQuery

user32

MessageBeep DestroyIcon ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus IsChild GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenu GetKeyState GetMenuItemInfoA GetScrollRange SetForegroundWindow ShowScrollBar IsWindowVisible GetClientRect GetMenu PostMessageA GetNextDlgGroupItem GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect wsprintfA GetWindowTextLengthA GetWindowTextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA InflateRect LoadCursorA SetCapture KillTimer SetTimer ClientToScreen SetWindowRgn GetScrollPos SetScrollPos GetWindow SetFocus GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent InvalidateRgn CopyAcceleratorTableA CharNextA PostThreadMessageA LockWindowUpdate GetDCEx GetNextDlgTabItem EndDialog CharUpperA LoadBitmapA InvalidateRect GetDC SendMessageA UpdateWindow EnableWindow WindowFromPoint SetRect GetSubMenu DrawIcon FillRect FindWindowA GetMenuStringA InsertMenuA ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect RegisterClipboardFormatA PostQuitMessage SetParent GetSystemMenu AppendMenuA DeleteMenu IsRectEmpty ReleaseDC IsZoomed LoadMenuA DestroyMenu UnpackDDElParam SetScrollRange SetCursor ReuseDDElParam

gdi32

CombineRgn GetMapMode PatBlt CreatePatternBrush SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SelectClipRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutA SetRectRgn SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetStockObject CreateSolidBrush GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect CreateRectRgn CreateFontIndirectA ExtTextOutA Ellipse LPtoDP CreateEllipticRgn GetDeviceCaps CreateFontA GetCharWidthA DeleteObject StretchDIBits DeleteDC GetTextExtentPoint32A GetTextMetricsA CreateCompatibleBitmap CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox Escape CreateCompatibleDC SelectObject

msimg32

TransparentBlt

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish DragQueryFileA ExtractIconA SHGetFileInfoA DragAcceptFiles

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc CoGetClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy VariantInit VariantClear VariantChangeType