9ef9d5d06e49e02fe07f83dde4c2a57f

Sharing

Copy URL Twitter E-mail

General

Target
9ef9d5d06e49e02fe07f83dde4c2a57f
Size 1.1MB
Sample220223-shbgesaed6
SHA256 55e36f83adc239d974852e374a27bcfb7cf158aebe78efed4a598bb7c28a154f
MD5 9ef9d5d06e49e02fe07f83dde4c2a57f
SHA1 a0f76b24c3ce96bf80d0d37fb59c8cefd6d98f33
SHA512 aedbfeee4f9403e10ac3310d39d973434ed82e2b66484c7638ee1c1a3fff41ef6ebc94aa6babf28029b190488f4070aa476b27f1f0c3fc6ae0065a553878e64d
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/TTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/TTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9ef9d5d06e49e02fe07f83dde4c2a57f

.dll 1.1MB

9ef9d5d06e49e02fe07f83dde4c2a57f

IMPHASH 9badaad62eb33fda5f7865ab87b9ed61
SHA256 55e36f83adc239d974852e374a27bcfb7cf158aebe78efed4a598bb7c28a154f
MD5 9ef9d5d06e49e02fe07f83dde4c2a57f
SHA1 a0f76b24c3ce96bf80d0d37fb59c8cefd6d98f33
SHA512 aedbfeee4f9403e10ac3310d39d973434ed82e2b66484c7638ee1c1a3fff41ef6ebc94aa6babf28029b190488f4070aa476b27f1f0c3fc6ae0065a553878e64d
SSDEEP 12288:s/9RP8f5TiefonhbF3wleXx7xXhP7/TTewZ0SwA58l01oDpI2+Mlgn:y9RP4onnYon7/TTeKLz58lcoDhq
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

395451

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep GetACP GetConsoleCP GetConsoleMode HeapAlloc GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA InterlockedDecrement GetModuleFileNameW FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GlobalFree CopyFileA FormatMessageA LocalFree MulDiv SetLastError GlobalSize GlobalAlloc GlobalLock GlobalUnlock FindFirstFileA FindNextFileA FindClose GetModuleHandleA GetProcAddress GetModuleFileNameA ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar SetHandleCount InterlockedExchange

user32

GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA GetKeyNameTextA MapVirtualKeyA SetParent PostThreadMessageA GetDCEx LockWindowUpdate ClientToScreen GrayStringA DrawTextExA TabbedTextOutA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetClassInfoExA CopyAcceleratorTableA RegisterClassA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA IntersectRect GetWindowPlacement GetSysColor SystemParametersInfoA DestroyMenu GetMenuItemInfoA InflateRect UnhookWindowsHookEx GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions CharLowerA CharLowerW CharUpperA CharUpperW DrawIcon AppendMenuA LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu GetSysColorBrush EndPaint BeginPaint GetClassInfoA GetWindowDC SendMessageA GetSystemMenu IsIconic GetWindowRect GetClientRect IsWindowVisible LoadIconA EnableWindow GetSystemMetrics FillRect FrameRect InvalidateRect InvalidateRgn SetTimer KillTimer SetCapture GetParent SetRectEmpty IsRectEmpty SetWindowPos UnionRect PtInRect CopyRect DestroyWindow SetRect ReleaseCapture OffsetRect ReleaseDC GetDC CreateWindowExA LoadCursorA GetIconInfo DrawTextA RemoveMenu SetScrollRange

gdi32

SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx GetPixel StartDocA PtVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx SetArcDirection PolyDraw PolylineTo PolyBezierTo CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateHatchBrush GetTextMetricsA GetBkColor GetTextColor GetRgnBox SetRectRgn GetMapMode DPtoLP GetCharWidthA CreateFontA SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform ArcTo GetStockObject SetGraphicsMode SetROP2 SetPolyFillMode GetDCOrgEx ExtTextOutA CreateDCA CopyMetaFileA GetDeviceCaps SetTextColor SetBkMode StretchDIBits RectVisible CreateBitmap SetBkColor StretchBlt SaveDC GetClipBox ExtSelectClipRgn SetStretchBltMode SetDIBitsToDevice RestoreDC GetObjectA RealizePalette GetDIBits CreateDIBSection DeleteDC CreateDIBPatternBrushPt SetBrushOrgEx SelectObject PatBlt DeleteObject GetTextExtentPoint32A BitBlt CreateCompatibleDC CombineRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateFontIndirectA CreateSolidBrush CreatePen SetWorldTransform

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate LoadTypeLi SysFreeString

Name

.text

Size

700KB

Virtual Size

697KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

180KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ