967a2d61a6b3676af51dfd3f2bdd379d

Sharing

Copy URL Twitter E-mail

General

Target
967a2d61a6b3676af51dfd3f2bdd379d
Size 472KB
Sample220222-w2nsmsdcgn
SHA256 613fec5c36362a82697c6ca8342b4f0badc40aaa0686d9d8748865a289a29d90
MD5 967a2d61a6b3676af51dfd3f2bdd379d
SHA1 76e5cc52271c77a10261087b0a22e8dfbf71a7ea
SHA512 70c2647b3432b44283381cce64fd976a768cecf89037ecdf6d57d9fc061a2cb728e2086a8c84453e8b73a2e9d86e3140f38063aeee1e6628b6ed58b7cbf673a0
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTujqkGXNrGHORQuBT:viSwub0W6LmT6wNyHZ8T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

967a2d61a6b3676af51dfd3f2bdd379d

.dll 472KB

967a2d61a6b3676af51dfd3f2bdd379d

IMPHASH a63557e4e36a007beeb5ec927b9074c8
SHA256 613fec5c36362a82697c6ca8342b4f0badc40aaa0686d9d8748865a289a29d90
MD5 967a2d61a6b3676af51dfd3f2bdd379d
SHA1 76e5cc52271c77a10261087b0a22e8dfbf71a7ea
SHA512 70c2647b3432b44283381cce64fd976a768cecf89037ecdf6d57d9fc061a2cb728e2086a8c84453e8b73a2e9d86e3140f38063aeee1e6628b6ed58b7cbf673a0
SSDEEP 12288:vicw4w2Vb0zq6k5Z2mTujqkGXNrGHORQuBT:viSwub0W6LmT6wNyHZ8T
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

153349

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings HeapAlloc GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetModuleHandleW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetCurrentThreadId CloseHandle FreeLibrary InterlockedDecrement GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA WritePrivateProfileStringA GetPrivateProfileStringA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetLastError SetLastError GetProcAddress GetModuleHandleA FreeEnvironmentStringsW LoadLibraryA

user32

SetRect InvalidateRgn GetNextDlgGroupItem RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetCursor PostQuitMessage DestroyMenu GetWindowThreadProcessId IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsRectEmpty IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA CharNextA ReleaseCapture SetCapture CharUpperA GetFocus GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect UnhookWindowsHookEx GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMetrics CreateWindowExW ShowWindow LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA LoadMenuA EnableMenuItem AppendMenuA DrawIcon DefWindowProcA LoadCursorA MessageBeep EnableWindow GetParent InvalidateRect ReleaseDC GetDC LoadBitmapA GetMessageTime

gdi32

ExtSelectClipRgn DeleteDC CreateBitmap TextOutA GetMapMode GetBkColor GetTextColor GetRgnBox CreateRectRgnIndirect RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape CreatePen GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetROP2 SetBkColor RestoreDC SaveDC GetDeviceCaps GetStockObject BitBlt CreateCompatibleDC ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringByteLen SysFreeString SysStringLen SysAllocStringLen VariantInit VariantChangeType VariantClear

ws2_32

socket select gethostbyname htonl htons inet_addr bind WSAGetLastError accept WSASetLastError connect sendto recvfrom WSAAsyncSelect send recv listen closesocket WSACleanup WSAStartup