6d6fd7a05973f9939e51556798d79021

Sharing

Copy URL Twitter E-mail

General

Target
6d6fd7a05973f9939e51556798d79021
Size 1.1MB
Sample220223-qrtm9aacd4
SHA256 1d11e8ea6e9de5e14b1dc43d6035f5d636b5708d57f226c79bcc481fc3e790ca
MD5 6d6fd7a05973f9939e51556798d79021
SHA1 9afccc77162838f260e8bb63ded287edd9b26007
SHA512 e44eb5b0870f43c389ce32dce37d94752f0e0b5abcf34d863e64cde35ffb9d76098234af83689911f5ab7f269364eb20bfb4f38109202682f8981033a6004050
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/oTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/oTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6d6fd7a05973f9939e51556798d79021

.dll 1.1MB

6d6fd7a05973f9939e51556798d79021

IMPHASH 9badaad62eb33fda5f7865ab87b9ed61
SHA256 1d11e8ea6e9de5e14b1dc43d6035f5d636b5708d57f226c79bcc481fc3e790ca
MD5 6d6fd7a05973f9939e51556798d79021
SHA1 9afccc77162838f260e8bb63ded287edd9b26007
SHA512 e44eb5b0870f43c389ce32dce37d94752f0e0b5abcf34d863e64cde35ffb9d76098234af83689911f5ab7f269364eb20bfb4f38109202682f8981033a6004050
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/oTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/oTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

395451

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep GetACP GetConsoleCP GetConsoleMode HeapAlloc GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA InterlockedDecrement GetModuleFileNameW FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GlobalFree CopyFileA FormatMessageA LocalFree MulDiv SetLastError GlobalSize GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindNextFileA FindClose GetModuleHandleA GetProcAddress GetModuleFileNameA ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar SetHandleCount InterlockedExchange

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA SetParent PostThreadMessageA GetDCEx LockWindowUpdate ClientToScreen GrayStringA DrawTextExA TabbedTextOutA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetClassInfoExA CopyAcceleratorTableA RegisterClassA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA IntersectRect GetWindowPlacement GetSysColor SystemParametersInfoA DestroyMenu GetMenuItemInfoA InflateRect UnhookWindowsHookEx GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions CharLowerA CharLowerW CharUpperA CharUpperW DrawIcon AppendMenuA LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu GetSysColorBrush EndPaint BeginPaint GetClassInfoA GetWindowDC SendMessageA GetSystemMenu IsIconic GetWindowRect GetClientRect IsWindowVisible LoadIconA EnableWindow GetSystemMetrics FillRect FrameRect InvalidateRect InvalidateRgn SetTimer KillTimer SetCapture GetParent SetRectEmpty IsRectEmpty SetWindowPos UnionRect PtInRect CopyRect DestroyWindow SetRect ReleaseCapture OffsetRect ReleaseDC GetDC CreateWindowExA LoadCursorA GetIconInfo DrawTextA RemoveMenu SetScrollRange

gdi32

SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx GetPixel StartDocA PtVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx SetArcDirection PolyDraw PolylineTo PolyBezierTo CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateHatchBrush GetTextMetricsA GetBkColor GetTextColor GetRgnBox SetRectRgn GetMapMode DPtoLP GetCharWidthA CreateFontA SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform ArcTo GetStockObject SetGraphicsMode SetROP2 SetPolyFillMode GetDCOrgEx ExtTextOutA CreateDCA CopyMetaFileA GetDeviceCaps SetTextColor SetBkMode StretchDIBits RectVisible CreateBitmap SetBkColor StretchBlt SaveDC GetClipBox ExtSelectClipRgn SetStretchBltMode SetDIBitsToDevice RestoreDC GetObjectA RealizePalette GetDIBits CreateDIBSection DeleteDC CreateDIBPatternBrushPt SetBrushOrgEx SelectObject PatBlt DeleteObject GetTextExtentPoint32A BitBlt CreateCompatibleDC CombineRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateFontIndirectA CreateSolidBrush CreatePen SetWorldTransform

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate LoadTypeLi SysFreeString

Name

.text

Size

700KB

Virtual Size

697KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

180KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ