77bf4a34bb5505df191b4edf277b55e6

Sharing

Copy URL Twitter E-mail

General

Target
77bf4a34bb5505df191b4edf277b55e6
Size 1.1MB
Sample220223-seh24aaec4
SHA256 3b4c3a79cbc168c5dc6efea053b2a25be77e32d74e7fcbf5f6ce8e97af58eb00
MD5 44649a627856be4b9bfd91d142640f75
SHA1 d866131fbf2dc4b4c944fc38fbacfe0df34d7839
SHA512 87f65550836b853cef97ea1b23b330fc867eb671823c5ac42934c6cce1177e748c87a81afbde58471ceb0cc243152de2fcf75e2632186997b3c4d17711088754
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/3TewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/3TeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

77bf4a34bb5505df191b4edf277b55e6

.dll 1.1MB

77bf4a34bb5505df191b4edf277b55e6

IMPHASH 9badaad62eb33fda5f7865ab87b9ed61
SHA256 3b4c3a79cbc168c5dc6efea053b2a25be77e32d74e7fcbf5f6ce8e97af58eb00
MD5 44649a627856be4b9bfd91d142640f75
SHA1 d866131fbf2dc4b4c944fc38fbacfe0df34d7839
SHA512 87f65550836b853cef97ea1b23b330fc867eb671823c5ac42934c6cce1177e748c87a81afbde58471ceb0cc243152de2fcf75e2632186997b3c4d17711088754
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/3TewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/3TeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

395451

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep GetACP GetConsoleCP GetConsoleMode HeapAlloc GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA InterlockedDecrement GetModuleFileNameW FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GlobalFree CopyFileA FormatMessageA LocalFree MulDiv SetLastError GlobalSize GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindNextFileA FindClose GetModuleHandleA GetProcAddress GetModuleFileNameA ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar SetHandleCount InterlockedExchange

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA SetParent PostThreadMessageA GetDCEx LockWindowUpdate ClientToScreen GrayStringA DrawTextExA TabbedTextOutA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetClassInfoExA CopyAcceleratorTableA RegisterClassA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA IntersectRect GetWindowPlacement GetSysColor SystemParametersInfoA DestroyMenu GetMenuItemInfoA InflateRect UnhookWindowsHookEx GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions CharLowerA CharLowerW CharUpperA CharUpperW DrawIcon AppendMenuA LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu GetSysColorBrush EndPaint BeginPaint GetClassInfoA GetWindowDC SendMessageA GetSystemMenu IsIconic GetWindowRect GetClientRect IsWindowVisible LoadIconA EnableWindow GetSystemMetrics FillRect FrameRect InvalidateRect InvalidateRgn SetTimer KillTimer SetCapture GetParent SetRectEmpty IsRectEmpty SetWindowPos UnionRect PtInRect CopyRect DestroyWindow SetRect ReleaseCapture OffsetRect ReleaseDC GetDC CreateWindowExA LoadCursorA GetIconInfo DrawTextA RemoveMenu SetScrollRange

gdi32

SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx GetPixel StartDocA PtVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx SetArcDirection PolyDraw PolylineTo PolyBezierTo CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateHatchBrush GetTextMetricsA GetBkColor GetTextColor GetRgnBox SetRectRgn GetMapMode DPtoLP GetCharWidthA CreateFontA SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform ArcTo GetStockObject SetGraphicsMode SetROP2 SetPolyFillMode GetDCOrgEx ExtTextOutA CreateDCA CopyMetaFileA GetDeviceCaps SetTextColor SetBkMode StretchDIBits RectVisible CreateBitmap SetBkColor StretchBlt SaveDC GetClipBox ExtSelectClipRgn SetStretchBltMode SetDIBitsToDevice RestoreDC GetObjectA RealizePalette GetDIBits CreateDIBSection DeleteDC CreateDIBPatternBrushPt SetBrushOrgEx SelectObject PatBlt DeleteObject GetTextExtentPoint32A BitBlt CreateCompatibleDC CombineRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateFontIndirectA CreateSolidBrush CreatePen SetWorldTransform

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate LoadTypeLi SysFreeString

Name

.text

Size

700KB

Virtual Size

697KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

180KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ