r2J9jEpSzDLpV[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
r2J9jEpSzDLpV.dll
Size 784KB
Sample220126-yleadaaad8
SHA256 0667fabc99dcc6f28aeb03f2e50c80c22312d645fdb593e8be97748d30859243
MD5 3ad36fdcd52e0bf8060501f4b92b05f9
SHA1 1dfa8c003a405ed579c049e5352cb81a8b832fd8
SHA512 fac0368d81d73ef555140a32e0fa914ab0599dea79c26f3a56643f1e559a0c6427e79000e8371a56aab583147d0baa9b456eea038635784f6c839d86ae2dc96d
SSDEEP 12288:aA9e3OrvpgqjtQFeci6dddifiHxoB3rNd9CDr:blrvpgqj2FeLQc3rLoD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

r2J9jEpSzDLpV.dll

.dll 784KB

r2J9jEpSzDLpV.dll

IMPHASH e140b4188c69c3bb4852b94813f9ec7f
SHA256 0667fabc99dcc6f28aeb03f2e50c80c22312d645fdb593e8be97748d30859243
MD5 3ad36fdcd52e0bf8060501f4b92b05f9
SHA1 1dfa8c003a405ed579c049e5352cb81a8b832fd8
SHA512 fac0368d81d73ef555140a32e0fa914ab0599dea79c26f3a56643f1e559a0c6427e79000e8371a56aab583147d0baa9b456eea038635784f6c839d86ae2dc96d
SSDEEP 12288:aA9e3OrvpgqjtQFeci6dddifiHxoB3rNd9CDr:blrvpgqj2FeLQc3rLoD
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

154610

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStringA FileTimeToLocalFileTime GetFileAttributesA GetFileTime GetTickCount GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetSystemInfo HeapReAlloc GetCommandLineA RtlUnwind RaiseException ExitProcess SetStdHandle GetFileType HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter FileTimeToSystemTime GetACP GetTimeZoneInformation LCMapStringA LCMapStringW HeapDestroy HeapCreate GetStdHandle GetStringTypeA GetStringTypeW SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetOEMCP GetCPInfo TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalAlloc FormatMessageA LocalFree MulDiv GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetModuleHandleA GetVersionExA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersion CompareStringA InterlockedExchange CompareStringW GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement InterlockedIncrement HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery Sleep FindResourceA LoadResource LockResource SizeofResource IsDebuggerPresent WideCharToMultiByte

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu GetWindowThreadProcessId SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect ReleaseDC GetDC SetWindowContextHelpId MapDialogRect PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps InvalidateRgn LoadBitmapA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA KillTimer SetTimer EnableWindow SendMessageA LoadIconA GetSystemMenu GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA ReleaseCapture GetMenuCheckMarkDimensions SetCapture AppendMenuA GetClientRect IsIconic GetSystemMetrics DrawIcon CharUpperA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindow GetWindowRect GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID PtInRect CopyRect

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA CreateRectRgnIndirect GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoRevokeClassObject CoTaskMemFree CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoUninitialize CoInitialize OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString GetErrorInfo SysAllocStringByteLen