e8c2683816fef2a9006c52fba2549fd5

Sharing

Copy URL Twitter E-mail

General

Target
e8c2683816fef2a9006c52fba2549fd5
Size 472KB
Sample220222-w2nsmscbf6
SHA256 232590a675ca44402c5a05cf98728857a88984144fc4e187e38da8fc59568c8d
MD5 e8c2683816fef2a9006c52fba2549fd5
SHA1 967b3c17ea21ef99ab1e6d196394430ec5e3b699
SHA512 c209d6d115895656c9e034056a8751c738f5a32a349b332d4fb75ac6ac99e34991cae66dec55b597ad0a04de9916cabc88af65a7254dba2381b3046203691b81
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTDjqkGXNrGHORQuBT:viSwub0W6LmTFwNyHZ8T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e8c2683816fef2a9006c52fba2549fd5

.dll 472KB

e8c2683816fef2a9006c52fba2549fd5

IMPHASH a63557e4e36a007beeb5ec927b9074c8
SHA256 232590a675ca44402c5a05cf98728857a88984144fc4e187e38da8fc59568c8d
MD5 e8c2683816fef2a9006c52fba2549fd5
SHA1 967b3c17ea21ef99ab1e6d196394430ec5e3b699
SHA512 c209d6d115895656c9e034056a8751c738f5a32a349b332d4fb75ac6ac99e34991cae66dec55b597ad0a04de9916cabc88af65a7254dba2381b3046203691b81
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTDjqkGXNrGHORQuBT:viSwub0W6LmTFwNyHZ8T
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

153349

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings HeapAlloc GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetModuleHandleW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetCurrentThreadId CloseHandle FreeLibrary InterlockedDecrement GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA WritePrivateProfileStringA GetPrivateProfileStringA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetLastError SetLastError GetProcAddress GetModuleHandleA FreeEnvironmentStringsW LoadLibraryA

user32

SetRect InvalidateRgn GetNextDlgGroupItem RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetCursor PostQuitMessage DestroyMenu GetWindowThreadProcessId IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsRectEmpty IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA CharNextA ReleaseCapture SetCapture CharUpperA GetFocus GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect UnhookWindowsHookEx GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMetrics CreateWindowExW ShowWindow LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA LoadMenuA EnableMenuItem AppendMenuA DrawIcon DefWindowProcA LoadCursorA MessageBeep EnableWindow GetParent InvalidateRect ReleaseDC GetDC LoadBitmapA GetMessageTime

gdi32

ExtSelectClipRgn DeleteDC CreateBitmap TextOutA GetMapMode GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape CreatePen GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetROP2 SetBkColor RestoreDC SaveDC GetDeviceCaps GetStockObject BitBlt CreateCompatibleDC ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringByteLen SysFreeString SysStringLen SysAllocStringLen VariantInit VariantChangeType VariantClear

ws2_32

socket select gethostbyname htonl htons inet_addr bind WSAGetLastError accept WSASetLastError connect sendto recvfrom WSAAsyncSelect send recv listen closesocket WSACleanup WSAStartup