ebaef29b5366a67f7fb60cfeba496f2e

Sharing

Copy URL Twitter E-mail

General

Target
ebaef29b5366a67f7fb60cfeba496f2e
Size 784KB
Sample220126-nf1ajscbfn
SHA256 f2f6299ae4493e9972899eae96ce879ca7681732bf5c2f14a4a0ac3ddc2794d4
MD5 ebaef29b5366a67f7fb60cfeba496f2e
SHA1 3f8c2c19a48466edd57844f5237ffb314bf0e144
SHA512 b6984c8c87f36fe07a9783a108509c036a8ecef5d901d0166916af3318e5ddbff3dc7401ac8f23f37271290bc5488ee2ee837573b0e7786c2d23a1a02051f4dc
SSDEEP 12288:aA9e3OrvpgqjtQFecC6dddifiHxoB3rNd9CDr:blrvpgqj2FeLQc3rLoD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ebaef29b5366a67f7fb60cfeba496f2e

.dll 784KB

ebaef29b5366a67f7fb60cfeba496f2e

IMPHASH e140b4188c69c3bb4852b94813f9ec7f
SHA256 f2f6299ae4493e9972899eae96ce879ca7681732bf5c2f14a4a0ac3ddc2794d4
MD5 ebaef29b5366a67f7fb60cfeba496f2e
SHA1 3f8c2c19a48466edd57844f5237ffb314bf0e144
SHA512 b6984c8c87f36fe07a9783a108509c036a8ecef5d901d0166916af3318e5ddbff3dc7401ac8f23f37271290bc5488ee2ee837573b0e7786c2d23a1a02051f4dc
SSDEEP 12288:aA9e3OrvpgqjtQFecC6dddifiHxoB3rNd9CDr:blrvpgqj2FeLQc3rLoD
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

154610

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStringA FileTimeToLocalFileTime GetFileAttributesA GetFileTime GetTickCount GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetSystemInfo HeapReAlloc GetCommandLineA RtlUnwind RaiseException ExitProcess SetStdHandle GetFileType HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter FileTimeToSystemTime GetACP GetTimeZoneInformation LCMapStringA LCMapStringW HeapDestroy HeapCreate GetStdHandle GetStringTypeA GetStringTypeW SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetOEMCP GetCPInfo TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalAlloc FormatMessageA LocalFree MulDiv GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetModuleHandleA GetVersionExA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersion CompareStringA InterlockedExchange CompareStringW GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement InterlockedIncrement HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery Sleep FindResourceA LoadResource LockResource SizeofResource IsDebuggerPresent WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu GetWindowThreadProcessId SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect ReleaseDC GetDC SetWindowContextHelpId MapDialogRect PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps InvalidateRgn LoadBitmapA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA KillTimer SetTimer EnableWindow SendMessageA LoadIconA GetSystemMenu GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA ReleaseCapture GetMenuCheckMarkDimensions SetCapture AppendMenuA GetClientRect IsIconic GetSystemMetrics DrawIcon CharUpperA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindow GetWindowRect GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID PtInRect CopyRect

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA CreateRectRgnIndirect GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoRevokeClassObject CoTaskMemFree CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoUninitialize CoInitialize OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString GetErrorInfo SysAllocStringByteLen