ddaf1b38b7c05895f8f3db0ec89e7be3

Sharing

Copy URL Twitter E-mail

General

Target
ddaf1b38b7c05895f8f3db0ec89e7be3
Size 1.0MB
Sample220225-kce9esfeh3
SHA256 c93f09690377458dac7f2239d6d0cd970e9081d101a877477cc4fe084e072733
MD5 ddaf1b38b7c05895f8f3db0ec89e7be3
SHA1 b0cb23f6b922e3e8fc7eff33f6ee825891d2d4e0
SHA512 01314e1f4424c982bafc47f1a5774164020779f0afaab02230232b788f5dc64835d28188dbb3cb83bf9bcec5b8e3d0f3a2c2f80c9e92b5466336e61fb69b5dba
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+ulVOe528JO6PC:6iRGcUY0UvDYNFtu35Ro6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ddaf1b38b7c05895f8f3db0ec89e7be3

.dll 1.0MB

ddaf1b38b7c05895f8f3db0ec89e7be3

IMPHASH fb7aa40890c33e7cab21ed01eb149bf8
SHA256 c93f09690377458dac7f2239d6d0cd970e9081d101a877477cc4fe084e072733
MD5 ddaf1b38b7c05895f8f3db0ec89e7be3
SHA1 b0cb23f6b922e3e8fc7eff33f6ee825891d2d4e0
SHA512 01314e1f4424c982bafc47f1a5774164020779f0afaab02230232b788f5dc64835d28188dbb3cb83bf9bcec5b8e3d0f3a2c2f80c9e92b5466336e61fb69b5dba
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+ulVOe528JO6PC:6iRGcUY0UvDYNFtu35Ro6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

117652

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetFileType IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr FatalAppExitA VirtualFree HeapCreate ExitProcess HeapDestroy HeapSize HeapReAlloc CreateThread ExitThread TerminateProcess GetCommandLineA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree RtlUnwind LocalLock LocalUnlock GetProfileIntA lstrcpynW GetTickCount SetErrorMode GetCurrentDirectoryA SetFileAttributesA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement CopyFileA GlobalSize FormatMessageA LocalFree SetLastError GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GlobalAlloc GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA lstrcmpA GlobalLock GlobalUnlock GlobalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA SizeofResource FindResourceA LoadResource LockResource FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GetProcAddress MulDiv GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA CompareStringW CompareStringA lstrlenA lstrcmpiW lstrlenW lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetTimeZoneInformation

user32

GetWindowThreadProcessId WaitMessage SendNotifyMessageA WindowFromDC InSendMessage MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetDialogBaseUnits GetMenuItemInfoA GetSysColorBrush GetMenuStringA InsertMenuA RemoveMenu SetParent GetSystemMenu AppendMenuA DeleteMenu SetCursorPos RedrawWindow InflateRect IsZoomed EndPaint BeginPaint GetWindowDC DrawTextExA DrawTextA TabbedTextOutA LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetDC ReleaseDC DestroyCursor SetRect SetWindowContextHelpId MapDialogRect GetMessageA TranslateMessage ValidateRect ShowOwnedPopups PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA IsClipboardFormatAvailable CheckRadioButton CheckDlgButton WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState EnableWindow SendMessageA UpdateWindow GetWindowRect CharLowerA CharLowerW CharUpperA CharUpperW IsChild GetFocus SetFocus IsWindow GetWindow SystemParametersInfoA SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor ScreenToClient EqualRect RegisterClipboardFormatA LockWindowUpdate GetDCEx UnionRect MapVirtualKeyA DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos GetKeyNameTextA WindowFromPoint GetTabbedTextExtentA PostThreadMessageA GetDlgItemInt CreateMenu FindWindowA RegisterWindowMessageA IsRectEmpty OffsetRect FillRect DrawIcon SetWindowRgn GetClientRect ClientToScreen InvalidateRect SetTimer KillTimer SetCapture GetParent PtInRect LoadCursorA GetSystemMetrics AdjustWindowRectEx SetCursor ReleaseCapture GetCursorPos IsIconic GetDlgCtrlID CopyRect GetWindowPlacement IntersectRect GrayStringA

gdi32

ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateSolidBrush CreateHatchBrush StretchDIBits GetCharWidthA CreateFontA GetTextMetricsA SetWindowExtEx CopyMetaFileA CreateFontIndirectA GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetRectRgn CombineRgn GetMapMode CreateMetaFileA CloseMetaFile DeleteMetaFile OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra GetTextExtentPoint32A SetPixel SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap CreateDCA DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx GetDeviceCaps CreatePen CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx Ellipse LPtoDP DPtoLP CreateEllipticRgn SetTextJustification

comdlg32

ReplaceTextA GetOpenFileNameA GetSaveFileNameA PrintDlgA FindTextA GetFileTitleA CommDlgExtendedError PageSetupDlgA

winspool.drv

GetJobA OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA GetFileSecurityA RegCloseKey RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCreateKeyA SetFileSecurityA RegDeleteValueA

shell32

DragQueryFileA SHGetFileInfoA ExtractIconA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleCreateLinkFromData OleCreateStaticFromData OleCreateFromFile OleCreateLinkToFile OleCreate OleLoad OleGetIconOfClass CreateItemMoniker CreateGenericComposite GetHGlobalFromILockBytes OleIsRunning CreateFileMoniker GetRunningObjectTable CoLockObjectExternal CoGetMalloc StgCreateDocfile StgOpenStorage StgIsStorageFile CreateOleAdviseHolder CreateDataAdviseHolder OleGetClipboard CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleCreateFromData OleQueryLinkFromData OleSetMenuDescriptor DoDragDrop IsAccelerator OleTranslateAccelerator OleRegGetMiscStatus OleRegEnumVerbs CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData ReleaseStgMedium CoTaskMemAlloc CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleSetContainedObject OleLockRunning CreateStreamOnHGlobal OleSaveToStream WriteClassStm OleSave OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance OleDestroyMenuDescriptor OleQueryCreateFromData OleCreateMenuDescriptor

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SysReAllocStringLen VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate LoadTypeLi VarDateFromStr

Name

.text

Size

640KB

Virtual Size

636KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

184KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ