zqG6KlvOPbDTn4x2eI[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
zqG6KlvOPbDTn4x2eI.dll
Size 520KB
Sample220202-jvd9eahgd4
SHA256 6d9a199d529e3dd5243a4332d5c852ab9d06c7edf28bf8cd20977bf59b0a60a5
MD5 544cc134bf0ea46a533c282c94e540ab
SHA1 dcbd5388357e0f45a116fc1dc66a740111dd5b69
SHA512 eac8d741971848746c0ef0d639267949662c1c3c69078a34154ff059bba96ef7fb29fd7b98543b8f0aa6090c0ca03a6fce7a86eb58c22f11ad591709adf1a75e
SSDEEP 12288:fGsy6sTuYND0D/SAzblQC1O1/1Q161s1c1P1T1V19Z1g1t1o1Z1nidamdRr5fIR:fFy6iND0D/nl/1O1/1Q161s1c1P1T1V
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

zqG6KlvOPbDTn4x2eI.dll

.dll 520KB

zqG6KlvOPbDTn4x2eI.dll

IMPHASH 4f614d8b5d6db43e16a7179103e38ad8
SHA256 6d9a199d529e3dd5243a4332d5c852ab9d06c7edf28bf8cd20977bf59b0a60a5
MD5 544cc134bf0ea46a533c282c94e540ab
SHA1 dcbd5388357e0f45a116fc1dc66a740111dd5b69
SHA512 eac8d741971848746c0ef0d639267949662c1c3c69078a34154ff059bba96ef7fb29fd7b98543b8f0aa6090c0ca03a6fce7a86eb58c22f11ad591709adf1a75e
SSDEEP 12288:fGsy6sTuYND0D/SAzblQC1O1/1Q161s1c1P1T1V19Z1g1t1o1Z1nidamdRr5fIR:fFy6iND0D/nl/1O1/1Q161s1c1P1T1V
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

137953

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiGetClassDevsA SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiDestroyDeviceInfoList

kernel32

GetOEMCP FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RtlUnwind RaiseException GetCommandLineA GetSystemInfo HeapReAlloc Sleep ExitProcess HeapSize GetACP IsValidCodePage TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo HeapDestroy GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource GetCurrentProcessId GlobalAddAtomA GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange lstrcmpA GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA OutputDebugStringA FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery GetVersionExA CreateFileA CloseHandle GetLastError WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource HeapCreate

user32

RegisterClipboardFormatA PostThreadMessageA SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA DrawIcon AppendMenuA SendMessageA GetSystemMenu GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA MessageBeep GetNextDlgGroupItem InvalidateRgn SetFocus InvalidateRect IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetCapture

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetClipBox CreateBitmap GetDeviceCaps Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA SetBkColor SetTextColor SelectObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegOpenKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegEnumKeyA RegDeleteKeyA RegEnumKeyExA RegOpenKeyExA RegQueryValueExA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysStringLen SysFreeString SysAllocStringByteLen SysAllocString SysAllocStringLen VariantClear VariantChangeType VariantInit VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect