047bd662bf621c53dba8987e9533e2a6

Sharing

Copy URL Twitter E-mail

General

Target
047bd662bf621c53dba8987e9533e2a6
Size 1.1MB
Sample220223-qzpdhaace8
SHA256 76e3f1d8221a179efdc8bbfc220893c71f78fb68484f75f60c080ced0db7d3fa
MD5 047bd662bf621c53dba8987e9533e2a6
SHA1 42f769613c79346aae044baa616d720dec84ba21
SHA512 621421b09dc6c04f7b74699ffac2b676fc4de6f0c64231746fd5c966959d3b398229de93270a5003522f7034d8b758651d36c9f82c5e1d37f69d20cd7d54180d
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/yTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/yTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

047bd662bf621c53dba8987e9533e2a6

.dll 1.1MB

047bd662bf621c53dba8987e9533e2a6

IMPHASH 9badaad62eb33fda5f7865ab87b9ed61
SHA256 76e3f1d8221a179efdc8bbfc220893c71f78fb68484f75f60c080ced0db7d3fa
MD5 047bd662bf621c53dba8987e9533e2a6
SHA1 42f769613c79346aae044baa616d720dec84ba21
SHA512 621421b09dc6c04f7b74699ffac2b676fc4de6f0c64231746fd5c966959d3b398229de93270a5003522f7034d8b758651d36c9f82c5e1d37f69d20cd7d54180d
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/yTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/yTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

395451

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep GetACP GetConsoleCP GetConsoleMode HeapAlloc GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA InterlockedDecrement GetModuleFileNameW FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GlobalFree CopyFileA FormatMessageA LocalFree MulDiv SetLastError GlobalSize GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindNextFileA FindClose GetModuleHandleA GetProcAddress GetModuleFileNameA ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar SetHandleCount InterlockedExchange

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA SetParent PostThreadMessageA GetDCEx LockWindowUpdate ClientToScreen GrayStringA DrawTextExA TabbedTextOutA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetClassInfoExA CopyAcceleratorTableA RegisterClassA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA IntersectRect GetWindowPlacement GetSysColor SystemParametersInfoA DestroyMenu GetMenuItemInfoA InflateRect UnhookWindowsHookEx GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions CharLowerA CharLowerW CharUpperA CharUpperW DrawIcon AppendMenuA LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu GetSysColorBrush EndPaint BeginPaint GetClassInfoA GetWindowDC SendMessageA GetSystemMenu IsIconic GetWindowRect GetClientRect IsWindowVisible LoadIconA EnableWindow GetSystemMetrics FillRect FrameRect InvalidateRect InvalidateRgn SetTimer KillTimer SetCapture GetParent SetRectEmpty IsRectEmpty SetWindowPos UnionRect PtInRect CopyRect DestroyWindow SetRect ReleaseCapture OffsetRect ReleaseDC GetDC CreateWindowExA LoadCursorA GetIconInfo DrawTextA RemoveMenu SetScrollRange

gdi32

SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx GetPixel StartDocA PtVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx SetArcDirection PolyDraw PolylineTo PolyBezierTo CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateHatchBrush GetTextMetricsA GetBkColor GetTextColor GetRgnBox SetRectRgn GetMapMode DPtoLP GetCharWidthA CreateFontA SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform ArcTo GetStockObject SetGraphicsMode SetROP2 SetPolyFillMode GetDCOrgEx ExtTextOutA CreateDCA CopyMetaFileA GetDeviceCaps SetTextColor SetBkMode StretchDIBits RectVisible CreateBitmap SetBkColor StretchBlt SaveDC GetClipBox ExtSelectClipRgn SetStretchBltMode SetDIBitsToDevice RestoreDC GetObjectA RealizePalette GetDIBits CreateDIBSection DeleteDC CreateDIBPatternBrushPt SetBrushOrgEx SelectObject PatBlt DeleteObject GetTextExtentPoint32A BitBlt CreateCompatibleDC CombineRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateFontIndirectA CreateSolidBrush CreatePen SetWorldTransform

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate LoadTypeLi SysFreeString

Name

.text

Size

700KB

Virtual Size

697KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

180KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ