ef1d3dc15f61d5401f7e4eb2d98bbee5

Sharing

Copy URL Twitter E-mail

General

Target
ef1d3dc15f61d5401f7e4eb2d98bbee5
Size 472KB
Sample220222-w2nsmscbg3
SHA256 13fc82c0d73fbf12dd8fc3583ffece7efc30b6cb07405b934576effbf10991a8
MD5 ef1d3dc15f61d5401f7e4eb2d98bbee5
SHA1 394730766c40b79f9dcc98dbd33b69b8b6d5fba3
SHA512 bf53cdc9be316a3c6bde655866493ad2755221cce66bc4ddc20c5ec0bb9e16324070d93a881aa87ef3cc53f5a4468dca4b20a35998ff0d8701fc5b94102e5138
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTujqkGXNrGHORQuBT:viSwub0W6LmT6wNyHZ8T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ef1d3dc15f61d5401f7e4eb2d98bbee5

.dll 472KB

ef1d3dc15f61d5401f7e4eb2d98bbee5

IMPHASH a63557e4e36a007beeb5ec927b9074c8
SHA256 13fc82c0d73fbf12dd8fc3583ffece7efc30b6cb07405b934576effbf10991a8
MD5 ef1d3dc15f61d5401f7e4eb2d98bbee5
SHA1 394730766c40b79f9dcc98dbd33b69b8b6d5fba3
SHA512 bf53cdc9be316a3c6bde655866493ad2755221cce66bc4ddc20c5ec0bb9e16324070d93a881aa87ef3cc53f5a4468dca4b20a35998ff0d8701fc5b94102e5138
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTujqkGXNrGHORQuBT:viSwub0W6LmT6wNyHZ8T
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

153349

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings HeapAlloc GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetModuleHandleW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetCurrentThreadId CloseHandle FreeLibrary InterlockedDecrement GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA WritePrivateProfileStringA GetPrivateProfileStringA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetLastError SetLastError GetProcAddress GetModuleHandleA FreeEnvironmentStringsW LoadLibraryA

user32

SetRect InvalidateRgn GetNextDlgGroupItem RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetCursor PostQuitMessage DestroyMenu GetWindowThreadProcessId IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsRectEmpty IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA CharNextA ReleaseCapture SetCapture CharUpperA GetFocus GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect UnhookWindowsHookEx GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMetrics CreateWindowExW ShowWindow LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA LoadMenuA EnableMenuItem AppendMenuA DrawIcon DefWindowProcA LoadCursorA MessageBeep EnableWindow GetParent InvalidateRect ReleaseDC GetDC LoadBitmapA GetMessageTime

gdi32

ExtSelectClipRgn DeleteDC CreateBitmap TextOutA GetMapMode GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape CreatePen GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetROP2 SetBkColor RestoreDC SaveDC GetDeviceCaps GetStockObject BitBlt CreateCompatibleDC ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringByteLen SysFreeString SysStringLen SysAllocStringLen VariantInit VariantChangeType VariantClear

ws2_32

socket select gethostbyname htonl htons inet_addr bind WSAGetLastError accept WSASetLastError connect sendto recvfrom WSAAsyncSelect send recv listen closesocket WSACleanup WSAStartup