be0a9a19183a8e0041d717110b16c380

Sharing

Copy URL Twitter E-mail

General

Target
be0a9a19183a8e0041d717110b16c380
Size 472KB
Sample220222-w2nsmscbf5
SHA256 f5b63dfeab952964ed7d75cb2fbebb359ecaf13e7f8f2e112c9650dd2f499912
MD5 be0a9a19183a8e0041d717110b16c380
SHA1 0d2b34da81b557ed9003a99e4b524ed622cc5894
SHA512 bc2e670a78501f860ccda14654c24764c4b5e6b94579b9f32616129c9a304736ef992600cf6f64856a112d00df2372a9a82b422befd4e29f2f0e60c4a05cffaf
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTFjqkGXNrGHORQuBT:viSwub0W6LmTTwNyHZ8T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

be0a9a19183a8e0041d717110b16c380

.dll 472KB

be0a9a19183a8e0041d717110b16c380

IMPHASH a63557e4e36a007beeb5ec927b9074c8
SHA256 f5b63dfeab952964ed7d75cb2fbebb359ecaf13e7f8f2e112c9650dd2f499912
MD5 be0a9a19183a8e0041d717110b16c380
SHA1 0d2b34da81b557ed9003a99e4b524ed622cc5894
SHA512 bc2e670a78501f860ccda14654c24764c4b5e6b94579b9f32616129c9a304736ef992600cf6f64856a112d00df2372a9a82b422befd4e29f2f0e60c4a05cffaf
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTFjqkGXNrGHORQuBT:viSwub0W6LmTTwNyHZ8T
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

153349

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings HeapAlloc GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetModuleHandleW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetCurrentThreadId CloseHandle FreeLibrary InterlockedDecrement GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA WritePrivateProfileStringA GetPrivateProfileStringA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetLastError SetLastError GetProcAddress GetModuleHandleA FreeEnvironmentStringsW LoadLibraryA

user32

SetRect InvalidateRgn GetNextDlgGroupItem RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetCursor PostQuitMessage DestroyMenu GetWindowThreadProcessId IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsRectEmpty IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA CharNextA ReleaseCapture SetCapture CharUpperA GetFocus GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect UnhookWindowsHookEx GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMetrics CreateWindowExW ShowWindow LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA LoadMenuA EnableMenuItem AppendMenuA DrawIcon DefWindowProcA LoadCursorA MessageBeep EnableWindow GetParent InvalidateRect ReleaseDC GetDC LoadBitmapA GetMessageTime

gdi32

ExtSelectClipRgn DeleteDC CreateBitmap TextOutA GetMapMode GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape CreatePen GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetROP2 SetBkColor RestoreDC SaveDC GetDeviceCaps GetStockObject BitBlt CreateCompatibleDC ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringByteLen SysFreeString SysStringLen SysAllocStringLen VariantInit VariantChangeType VariantClear

ws2_32

socket select gethostbyname htonl htons inet_addr bind WSAGetLastError accept WSASetLastError connect sendto recvfrom WSAAsyncSelect send recv listen closesocket WSACleanup WSAStartup