5bb5f02eee4f1d5adb4ac47ce1de643d

Sharing

Copy URL Twitter E-mail

General

Target
5bb5f02eee4f1d5adb4ac47ce1de643d
Size 1.0MB
Sample220225-kce9esfeh4
SHA256 0e4eec73c3e0427d4cc8ca162bdd07dce911e750df69ce92767e8dbde62a7e92
MD5 5bb5f02eee4f1d5adb4ac47ce1de643d
SHA1 772db8e83a50b8d31043c0af70274f470b45851e
SHA512 2234860b4e78bb32cd835e88c5fb59a190c94a2473403ce7f654e6440f35ae3ccaad080a8b07e30a972fdb7b78d7d47db2e67a561258772d4718a465361caab0
SSDEEP 12288:ftii93xBkUW+xtiaTNdrrlKoQECMiZJ6+OD0/LXBFIiu7yMrH2Rz/:liebkUW+XiaTrnlKa9iL6+nLnu7wRz/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5bb5f02eee4f1d5adb4ac47ce1de643d

.dll 1.0MB

5bb5f02eee4f1d5adb4ac47ce1de643d

IMPHASH fb7aa40890c33e7cab21ed01eb149bf8
SHA256 0e4eec73c3e0427d4cc8ca162bdd07dce911e750df69ce92767e8dbde62a7e92
MD5 5bb5f02eee4f1d5adb4ac47ce1de643d
SHA1 772db8e83a50b8d31043c0af70274f470b45851e
SHA512 2234860b4e78bb32cd835e88c5fb59a190c94a2473403ce7f654e6440f35ae3ccaad080a8b07e30a972fdb7b78d7d47db2e67a561258772d4718a465361caab0
SSDEEP 12288:ftii93xBkUW+xtiaTNdrrlKoQECMiZJ6+OD0/LXBFIiu7yMrH2Rz/:liebkUW+XiaTrnlKa9iL6+nLnu7wRz/
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

117316

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetFileType IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr FatalAppExitA VirtualFree HeapCreate ExitProcess HeapDestroy HeapSize HeapReAlloc CreateThread ExitThread TerminateProcess GetCommandLineA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree RtlUnwind LocalLock LocalUnlock GetProfileIntA lstrcpynW GetTickCount SetErrorMode GetCurrentDirectoryA SetFileAttributesA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement CopyFileA GlobalSize FormatMessageA LocalFree SetLastError GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GlobalAlloc GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA lstrcmpA GlobalLock GlobalUnlock GlobalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA SizeofResource FindResourceA LoadResource LockResource FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GetProcAddress MulDiv GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA CompareStringW CompareStringA lstrlenA lstrcmpiW lstrlenW lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetTimeZoneInformation

user32

GetWindowThreadProcessId WaitMessage SendNotifyMessageA WindowFromDC InSendMessage MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetDialogBaseUnits GetMenuItemInfoA GetSysColorBrush GetMenuStringA InsertMenuA RemoveMenu SetParent GetSystemMenu AppendMenuA DeleteMenu SetCursorPos RedrawWindow InflateRect IsZoomed EndPaint BeginPaint GetWindowDC DrawTextExA DrawTextA TabbedTextOutA LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetDC ReleaseDC DestroyCursor SetRect SetWindowContextHelpId MapDialogRect GetMessageA TranslateMessage ValidateRect ShowOwnedPopups PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA IsClipboardFormatAvailable CheckRadioButton CheckDlgButton WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState EnableWindow SendMessageA UpdateWindow GetWindowRect CharLowerA CharLowerW CharUpperA CharUpperW IsChild GetFocus SetFocus IsWindow GetWindow SystemParametersInfoA SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor ScreenToClient EqualRect RegisterClipboardFormatA LockWindowUpdate GetDCEx UnionRect MapVirtualKeyA DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos GetKeyNameTextA WindowFromPoint GetTabbedTextExtentA PostThreadMessageA GetDlgItemInt CreateMenu FindWindowA RegisterWindowMessageA IsRectEmpty OffsetRect FillRect DrawIcon SetWindowRgn GetClientRect ClientToScreen InvalidateRect SetTimer KillTimer SetCapture GetParent PtInRect LoadCursorA GetSystemMetrics AdjustWindowRectEx SetCursor ReleaseCapture GetCursorPos IsIconic GetDlgCtrlID CopyRect GetWindowPlacement IntersectRect GrayStringA

gdi32

ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateSolidBrush CreateHatchBrush StretchDIBits GetCharWidthA CreateFontA GetTextMetricsA SetWindowExtEx CopyMetaFileA CreateFontIndirectA GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetRectRgn CombineRgn GetMapMode CreateMetaFileA CloseMetaFile DeleteMetaFile OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra GetTextExtentPoint32A SetPixel SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap CreateDCA DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx GetDeviceCaps CreatePen CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx Ellipse LPtoDP DPtoLP CreateEllipticRgn SetTextJustification

comdlg32

ReplaceTextA GetOpenFileNameA GetSaveFileNameA PrintDlgA FindTextA GetFileTitleA CommDlgExtendedError PageSetupDlgA

winspool.drv

GetJobA OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA GetFileSecurityA RegCloseKey RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCreateKeyA SetFileSecurityA RegDeleteValueA

shell32

DragQueryFileA SHGetFileInfoA ExtractIconA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleCreateLinkFromData OleCreateStaticFromData OleCreateFromFile OleCreateLinkToFile OleCreate OleLoad OleGetIconOfClass CreateItemMoniker CreateGenericComposite GetHGlobalFromILockBytes OleIsRunning CreateFileMoniker GetRunningObjectTable CoLockObjectExternal CoGetMalloc StgCreateDocfile StgOpenStorage StgIsStorageFile CreateOleAdviseHolder CreateDataAdviseHolder OleGetClipboard CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleCreateFromData OleQueryLinkFromData OleSetMenuDescriptor DoDragDrop IsAccelerator OleTranslateAccelerator OleRegGetMiscStatus OleRegEnumVerbs CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData ReleaseStgMedium CoTaskMemAlloc CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleSetContainedObject OleLockRunning CreateStreamOnHGlobal OleSaveToStream WriteClassStm OleSave OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance OleDestroyMenuDescriptor OleQueryCreateFromData OleCreateMenuDescriptor

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SysReAllocStringLen VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate LoadTypeLi VarDateFromStr

Name

.text

Size

636KB

Virtual Size

635KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

192KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ