caf39191cc7501d940f39237880ef0c2

Sharing

Copy URL Twitter E-mail

General

Target
caf39191cc7501d940f39237880ef0c2
Size 660KB
Sample220125-ym4lnadger
SHA256 9242e85ab71416c52a3fa2ed0a5b9cf5d057d498649b02f9b7e9d2d8df2de076
MD5 caf39191cc7501d940f39237880ef0c2
SHA1 cf0435904708a748131e07ed103d95cb04d66057
SHA512 9888c7ef17f86a8d57a004c5e626d34ad28579eb6f702b29f2873d4c53cd1488864951fc55bee6669c77534bb6419d50012a8f6c97df011e141eaddc54f4dae6
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lbNACHKm2tkJV8u:o87vGJzomxhwRbKZ+8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

caf39191cc7501d940f39237880ef0c2

.dll 660KB

caf39191cc7501d940f39237880ef0c2

IMPHASH 5292b0afb12939cb3a86034c8a283858
SHA256 9242e85ab71416c52a3fa2ed0a5b9cf5d057d498649b02f9b7e9d2d8df2de076
MD5 caf39191cc7501d940f39237880ef0c2
SHA1 cf0435904708a748131e07ed103d95cb04d66057
SHA512 9888c7ef17f86a8d57a004c5e626d34ad28579eb6f702b29f2873d4c53cd1488864951fc55bee6669c77534bb6419d50012a8f6c97df011e141eaddc54f4dae6
SSDEEP 12288:tGv8HbMqGJOMFfp76mfz9hzJ8Yd4lbNACHKm2tkJV8u:o87vGJzomxhwRbKZ+8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

111749

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetFileType GetTimeZoneInformation SetStdHandle GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage IsBadCodePtr GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr HeapCreate HeapDestroy HeapSize HeapReAlloc TerminateProcess RtlUnwind ExitProcess GetCommandLineA GetSystemInfo GetSystemTimeAsFileTime GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA FormatMessageA LocalFree MulDiv GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW CloseHandle lstrcpynA GlobalAddAtomA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA FindResourceA LockResource FreeResource GlobalFree GlobalUnlock GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA GetVersion GetVersionExA CompareStringA GetThreadLocale lstrcmpiA GetLastError InterlockedExchange GetStringTypeExA MultiByteToWideChar GetACP CompareStringW WideCharToMultiByte GetLocaleInfoA lstrlenA SizeofResource LoadResource FindResourceW HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree GetStringTypeW VirtualQuery

user32

LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar GetClientRect GetMenu GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect PtInRect MessageBoxA GetLastActivePopup ShowOwnedPopups SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA SetRect GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowTextLengthA GetWindowTextA GetFocus SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA GetWindowLongA IsDialogMessageA SetDlgItemTextA RegisterClipboardFormatA WindowFromPoint RemoveMenu GetTabbedTextExtentA PostThreadMessageA CreateMenu SetParent SetWindowRgn DrawIcon FindWindowA GetMenuItemInfoA InflateRect SendDlgItemMessageA SendMessageA wsprintfA GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos GetDlgItem PostMessageA DestroyCursor LoadCursorA ReleaseDC PostQuitMessage CharUpperA SetTimer KillTimer InvalidateRect GetWindowRect WindowFromDC EnableWindow UpdateWindow LockWindowUpdate GetDCEx IsWindowVisible GetSysColorBrush DestroyIcon MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA IsRectEmpty CharNextA DeleteMenu IsZoomed GetMenuStringA AppendMenuA InsertMenuA GetDC EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCursor FillRect

gdi32

EndDoc DeleteDC CreateDCA GetViewportOrgEx PatBlt GetStockObject SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode ExcludeClipRect IntersectClipRect LineTo MoveToEx SetTextAlign DeleteObject SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx AbortDoc ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush CreateRectRgnIndirect GetTextMetricsA GetTextExtentPoint32A StretchDIBits GetCharWidthA CreateFontA GetTextColor GetRgnBox CreateFontIndirectA SetRectRgn CombineRgn GetMapMode CreateEllipticRgn LPtoDP GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetAbortProc EndPage StartPage StartDocA DPtoLP GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap Arc PolyBezier Polyline Polygon CreatePen RoundRect SetPixelV GetPixel Ellipse BitBlt GetBkColor CreateSolidBrush Rectangle SetWindowExtEx CreateCompatibleDC CreateCompatibleBitmap

comdlg32

GetOpenFileNameA GetSaveFileNameA PrintDlgA CommDlgExtendedError GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

RegSetValueA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA SetFileSecurityA RegCreateKeyA RegCloseKey GetFileSecurityA

shell32

DragFinish ExtractIconA SHGetFileInfoA DragQueryFileA

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleInitialize CoFreeUnusedLibraries OleUninitialize

oleaut32

SysFreeString VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysAllocStringLen