fde0fd3a5fb7b0ac12fae7140ca91e26

Sharing

Copy URL Twitter E-mail

General

Target
fde0fd3a5fb7b0ac12fae7140ca91e26
Size 1.1MB
Sample220223-nwsweabccp
SHA256 d465cde7be89fe60b78f8d51abc022ec616d179f862d79207e414829b0e68708
MD5 fde0fd3a5fb7b0ac12fae7140ca91e26
SHA1 6f1b90bca3580237182f6df2d254db8da4a1b1e4
SHA512 660e60c10d7fb30988c83373f220f01cfd09f95438e7a9f803aa269df0902eeff41fbfee6ede45d5513490ca2c69a1084893fbf2686da6a630ec6007b00ec8a3
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/zTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/zTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fde0fd3a5fb7b0ac12fae7140ca91e26

.dll 1.1MB

fde0fd3a5fb7b0ac12fae7140ca91e26

IMPHASH 9badaad62eb33fda5f7865ab87b9ed61
SHA256 d465cde7be89fe60b78f8d51abc022ec616d179f862d79207e414829b0e68708
MD5 fde0fd3a5fb7b0ac12fae7140ca91e26
SHA1 6f1b90bca3580237182f6df2d254db8da4a1b1e4
SHA512 660e60c10d7fb30988c83373f220f01cfd09f95438e7a9f803aa269df0902eeff41fbfee6ede45d5513490ca2c69a1084893fbf2686da6a630ec6007b00ec8a3
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/zTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/zTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

395451

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep GetACP GetConsoleCP GetConsoleMode HeapAlloc GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA InterlockedDecrement GetModuleFileNameW FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GlobalFree CopyFileA FormatMessageA LocalFree MulDiv SetLastError GlobalSize GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindNextFileA FindClose GetModuleHandleA GetProcAddress GetModuleFileNameA ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar SetHandleCount InterlockedExchange

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA SetParent PostThreadMessageA GetDCEx LockWindowUpdate ClientToScreen GrayStringA DrawTextExA TabbedTextOutA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetClassInfoExA CopyAcceleratorTableA RegisterClassA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA IntersectRect GetWindowPlacement GetSysColor SystemParametersInfoA DestroyMenu GetMenuItemInfoA InflateRect UnhookWindowsHookEx GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions CharLowerA CharLowerW CharUpperA CharUpperW DrawIcon AppendMenuA LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu GetSysColorBrush EndPaint BeginPaint GetClassInfoA GetWindowDC SendMessageA GetSystemMenu IsIconic GetWindowRect GetClientRect IsWindowVisible LoadIconA EnableWindow GetSystemMetrics FillRect FrameRect InvalidateRect InvalidateRgn SetTimer KillTimer SetCapture GetParent SetRectEmpty IsRectEmpty SetWindowPos UnionRect PtInRect CopyRect DestroyWindow SetRect ReleaseCapture OffsetRect ReleaseDC GetDC CreateWindowExA LoadCursorA GetIconInfo DrawTextA RemoveMenu SetScrollRange

gdi32

SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx GetPixel StartDocA PtVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx SetArcDirection PolyDraw PolylineTo PolyBezierTo CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateHatchBrush GetTextMetricsA GetBkColor GetTextColor GetRgnBox SetRectRgn GetMapMode DPtoLP GetCharWidthA CreateFontA SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform ArcTo GetStockObject SetGraphicsMode SetROP2 SetPolyFillMode GetDCOrgEx ExtTextOutA CreateDCA CopyMetaFileA GetDeviceCaps SetTextColor SetBkMode StretchDIBits RectVisible CreateBitmap SetBkColor StretchBlt SaveDC GetClipBox ExtSelectClipRgn SetStretchBltMode SetDIBitsToDevice RestoreDC GetObjectA RealizePalette GetDIBits CreateDIBSection DeleteDC CreateDIBPatternBrushPt SetBrushOrgEx SelectObject PatBlt DeleteObject GetTextExtentPoint32A BitBlt CreateCompatibleDC CombineRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateFontIndirectA CreateSolidBrush CreatePen SetWorldTransform

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate LoadTypeLi SysFreeString

Name

.text

Size

700KB

Virtual Size

697KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

180KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ