b4b1f0e02ac060992dfd8e086d187420

Sharing

Copy URL Twitter E-mail

General

Target
b4b1f0e02ac060992dfd8e086d187420
Size 660KB
Sample220125-tqveyaahd5
SHA256 9f6863a70c9befcf79456f45bef3077c022d0fd85e87b9c0c3cd7be94f76110f
MD5 b4b1f0e02ac060992dfd8e086d187420
SHA1 b63fc1a4fdd0c332bb885352a65d6dfe905cbc2b
SHA512 18e5cb46d01739d3c2f1ea5235841b3a94b86ae580b5b2fbcc39bc6abd2f0f28ae9909e86d6e79eb13d59d85da459ca9f6f2fdf14ea73abe32adfebb774e34ad
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lbNACHKm2tkJV8u:o87vGJzomxhwRbKZ+8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b4b1f0e02ac060992dfd8e086d187420

.dll 660KB

b4b1f0e02ac060992dfd8e086d187420

IMPHASH 5292b0afb12939cb3a86034c8a283858
SHA256 9f6863a70c9befcf79456f45bef3077c022d0fd85e87b9c0c3cd7be94f76110f
MD5 b4b1f0e02ac060992dfd8e086d187420
SHA1 b63fc1a4fdd0c332bb885352a65d6dfe905cbc2b
SHA512 18e5cb46d01739d3c2f1ea5235841b3a94b86ae580b5b2fbcc39bc6abd2f0f28ae9909e86d6e79eb13d59d85da459ca9f6f2fdf14ea73abe32adfebb774e34ad
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lbNACHKm2tkJV8u:o87vGJzomxhwRbKZ+8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

111749

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetFileType GetTimeZoneInformation SetStdHandle GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr HeapCreate HeapDestroy HeapSize HeapReAlloc TerminateProcess RtlUnwind ExitProcess GetCommandLineA GetSystemInfo GetSystemTimeAsFileTime GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA FormatMessageA LocalFree MulDiv GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW CloseHandle lstrcpynA GlobalAddAtomA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA FindResourceA LockResource FreeResource GlobalFree GlobalUnlock GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA SizeofResource LoadResource FindResourceW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStringTypeW VirtualQuery

user32

LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar GetClientRect GetMenu GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect PtInRect MessageBoxA GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA SetRect GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowTextLengthA GetWindowTextA GetFocus SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA GetWindowLongA IsDialogMessageA SetDlgItemTextA RegisterClipboardFormatA WindowFromPoint RemoveMenu GetTabbedTextExtentA PostThreadMessageA CreateMenu SetParent SetWindowRgn DrawIcon FindWindowA GetMenuItemInfoA InflateRect SendDlgItemMessageA SendMessageA wsprintfA GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos GetDlgItem PostMessageA DestroyCursor LoadCursorA ReleaseDC PostQuitMessage CharUpperA SetTimer KillTimer InvalidateRect GetWindowRect WindowFromDC EnableWindow UpdateWindow LockWindowUpdate GetDCEx IsWindowVisible GetSysColorBrush DestroyIcon MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA IsRectEmpty CharNextA DeleteMenu IsZoomed GetMenuStringA AppendMenuA InsertMenuA GetDC EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCursor FillRect

gdi32

EndDoc DeleteDC CreateDCA GetViewportOrgEx PatBlt GetStockObject SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SetTextAlign DeleteObject SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx AbortDoc ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateRectRgnIndirect GetTextMetricsA GetTextExtentPoint32A StretchDIBits GetCharWidthA CreateFontA GetTextColor GetRgnBox CreateFontIndirectA SetRectRgn CombineRgn GetMapMode CreateEllipticRgn LPtoDP GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetAbortProc EndPage StartPage StartDocA DPtoLP GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap Arc PolyBezier Polyline Polygon CreatePen RoundRect SetPixelV GetPixel Ellipse BitBlt GetBkColor CreateSolidBrush Rectangle SetWindowExtEx CreateCompatibleDC CreateCompatibleBitmap

comdlg32

GetOpenFileNameA GetSaveFileNameA PrintDlgA CommDlgExtendedError GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish ExtractIconA SHGetFileInfoA DragQueryFileA

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize

oleaut32

SysFreeString VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysAllocStringLen