qOQyN5jP[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
qOQyN5jP.dll
Size 660KB
Sample220125-vdez6abdd9
SHA256 cdfdf4e3b144b4bc00fcdf46bd60efdf13895bcd4443c709b4f72492cb28e0cb
MD5 e7236af3be07fc1fdf99bdc3dd34688e
SHA1 b24a670bd34c80696aba2561f96b86ac7ef01296
SHA512 9dfa65dd8e157ae1de071d32fc2dec23c9d2865ba9785153d16588d68d05bc1d5fdd0023946023c44caab27f24ea0fc9043f2941535fdc3d12ec9205786af363
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lMNACHKm2tkJV8u:o87vGJzomxhwMbKZ+8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

qOQyN5jP.dll

.dll 660KB

qOQyN5jP.dll

IMPHASH 5292b0afb12939cb3a86034c8a283858
SHA256 cdfdf4e3b144b4bc00fcdf46bd60efdf13895bcd4443c709b4f72492cb28e0cb
MD5 e7236af3be07fc1fdf99bdc3dd34688e
SHA1 b24a670bd34c80696aba2561f96b86ac7ef01296
SHA512 9dfa65dd8e157ae1de071d32fc2dec23c9d2865ba9785153d16588d68d05bc1d5fdd0023946023c44caab27f24ea0fc9043f2941535fdc3d12ec9205786af363
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lMNACHKm2tkJV8u:o87vGJzomxhwMbKZ+8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

111749

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetFileType GetTimeZoneInformation SetStdHandle GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr HeapCreate HeapDestroy HeapSize HeapReAlloc TerminateProcess RtlUnwind ExitProcess GetCommandLineA GetSystemInfo GetSystemTimeAsFileTime GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA FormatMessageA LocalFree MulDiv GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW CloseHandle lstrcpynA GlobalAddAtomA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA FindResourceA LockResource FreeResource GlobalFree GlobalUnlock GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA SizeofResource LoadResource FindResourceW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStringTypeW VirtualQuery

user32

LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar GetClientRect GetMenu GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect PtInRect MessageBoxA GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA SetRect GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowTextLengthA GetWindowTextA GetFocus SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA GetWindowLongA IsDialogMessageA SetDlgItemTextA RegisterClipboardFormatA WindowFromPoint RemoveMenu GetTabbedTextExtentA PostThreadMessageA CreateMenu SetParent SetWindowRgn DrawIcon FindWindowA GetMenuItemInfoA InflateRect SendDlgItemMessageA SendMessageA wsprintfA GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos GetDlgItem PostMessageA DestroyCursor LoadCursorA ReleaseDC PostQuitMessage CharUpperA SetTimer KillTimer InvalidateRect GetWindowRect WindowFromDC EnableWindow UpdateWindow LockWindowUpdate GetDCEx IsWindowVisible GetSysColorBrush DestroyIcon MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA IsRectEmpty CharNextA DeleteMenu IsZoomed GetMenuStringA AppendMenuA InsertMenuA GetDC EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCursor FillRect

gdi32

EndDoc DeleteDC CreateDCA GetViewportOrgEx PatBlt GetStockObject SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SetTextAlign DeleteObject SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx AbortDoc ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateRectRgnIndirect GetTextMetricsA GetTextExtentPoint32A StretchDIBits GetCharWidthA CreateFontA GetTextColor GetRgnBox CreateFontIndirectA SetRectRgn CombineRgn GetMapMode CreateEllipticRgn LPtoDP GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetAbortProc EndPage StartPage StartDocA DPtoLP GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap Arc PolyBezier Polyline Polygon CreatePen RoundRect SetPixelV GetPixel Ellipse BitBlt GetBkColor CreateSolidBrush Rectangle SetWindowExtEx CreateCompatibleDC CreateCompatibleBitmap

comdlg32

GetOpenFileNameA GetSaveFileNameA PrintDlgA CommDlgExtendedError GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish ExtractIconA SHGetFileInfoA DragQueryFileA

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize

oleaut32

SysFreeString VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysAllocStringLen