d61a9a51006f1df934baa9950267ce8b

Sharing

Copy URL Twitter E-mail

General

Target
d61a9a51006f1df934baa9950267ce8b
Size 784KB
Sample220126-m8lgescbap
SHA256 5f3f6cc534fd1682001d6cc202196300741fa6f58f6e4cf986f83658f07688ef
MD5 d61a9a51006f1df934baa9950267ce8b
SHA1 0578c727a745a6fd0afa5a9f42a7d8c0f871b6d1
SHA512 ca4a02ef7435e52840e6abe9c7e59f11797aa661d25cf15b92ee78979891810591b6de2853eafa4a61485968d54891dd23be805fd080bc5f7c93f6bd8185d87f
SSDEEP 12288:aA9e3OrvpgqjtQFecH6dddifiHxoB3rNd9CDr:blrvpgqj2FekQc3rLoD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d61a9a51006f1df934baa9950267ce8b

.dll 784KB

d61a9a51006f1df934baa9950267ce8b

IMPHASH e140b4188c69c3bb4852b94813f9ec7f
SHA256 5f3f6cc534fd1682001d6cc202196300741fa6f58f6e4cf986f83658f07688ef
MD5 d61a9a51006f1df934baa9950267ce8b
SHA1 0578c727a745a6fd0afa5a9f42a7d8c0f871b6d1
SHA512 ca4a02ef7435e52840e6abe9c7e59f11797aa661d25cf15b92ee78979891810591b6de2853eafa4a61485968d54891dd23be805fd080bc5f7c93f6bd8185d87f
SSDEEP 12288:aA9e3OrvpgqjtQFecH6dddifiHxoB3rNd9CDr:blrvpgqj2FekQc3rLoD
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

154610

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStringA FileTimeToLocalFileTime GetFileAttributesA GetFileTime GetTickCount GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetSystemInfo HeapReAlloc GetCommandLineA RtlUnwind RaiseException ExitProcess SetStdHandle GetFileType HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter FileTimeToSystemTime GetACP GetTimeZoneInformation LCMapStringA LCMapStringW HeapDestroy HeapCreate GetStdHandle GetStringTypeA GetStringTypeW SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetOEMCP GetCPInfo TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalAlloc FormatMessageA LocalFree MulDiv GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetModuleHandleA GetVersionExA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersion CompareStringA InterlockedExchange CompareStringW GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement InterlockedIncrement HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery Sleep FindResourceA LoadResource LockResource SizeofResource IsDebuggerPresent WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu GetWindowThreadProcessId SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect ReleaseDC GetDC SetWindowContextHelpId MapDialogRect PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps InvalidateRgn LoadBitmapA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA KillTimer SetTimer EnableWindow SendMessageA LoadIconA GetSystemMenu GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA ReleaseCapture GetMenuCheckMarkDimensions SetCapture AppendMenuA GetClientRect IsIconic GetSystemMetrics DrawIcon CharUpperA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindow GetWindowRect GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID PtInRect CopyRect

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA CreateRectRgnIndirect GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoRevokeClassObject CoTaskMemFree CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoUninitialize CoInitialize OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString GetErrorInfo SysAllocStringByteLen