d70a9f01d90494a6ccc93f26c5623b25

Sharing

Copy URL Twitter E-mail

General

Target
d70a9f01d90494a6ccc93f26c5623b25
Size 1.0MB
Sample220225-kce9esfeh5
SHA256 a1ef5d763dee7ba2612d07c7028a3ed0f47352bb4e09b2c27d93736409ee067d
MD5 d70a9f01d90494a6ccc93f26c5623b25
SHA1 cb49ee1c7be1bae02ce3bc7960dfa3b0bc1ed455
SHA512 a120ead465211035b3eb53a64dd630e1ffbe4166eea5b160203edc59e217f469d8cfd425c1023857c0d356e74ae57b848a15fc6760c988347019724eafc7a908
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+ueVOe528JO6PC:6iRGcUY0UvDYNFtue5Ro6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d70a9f01d90494a6ccc93f26c5623b25

.dll 1.0MB

d70a9f01d90494a6ccc93f26c5623b25

IMPHASH fb7aa40890c33e7cab21ed01eb149bf8
SHA256 a1ef5d763dee7ba2612d07c7028a3ed0f47352bb4e09b2c27d93736409ee067d
MD5 d70a9f01d90494a6ccc93f26c5623b25
SHA1 cb49ee1c7be1bae02ce3bc7960dfa3b0bc1ed455
SHA512 a120ead465211035b3eb53a64dd630e1ffbe4166eea5b160203edc59e217f469d8cfd425c1023857c0d356e74ae57b848a15fc6760c988347019724eafc7a908
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+ueVOe528JO6PC:6iRGcUY0UvDYNFtue5Ro6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

117652

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetFileType IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr FatalAppExitA VirtualFree HeapCreate ExitProcess HeapDestroy HeapSize HeapReAlloc CreateThread ExitThread TerminateProcess GetCommandLineA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree RtlUnwind LocalLock LocalUnlock GetProfileIntA lstrcpynW GetTickCount SetErrorMode GetCurrentDirectoryA SetFileAttributesA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement CopyFileA GlobalSize FormatMessageA LocalFree SetLastError GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GlobalAlloc GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA lstrcmpA GlobalLock GlobalUnlock GlobalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA SizeofResource FindResourceA LoadResource LockResource FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GetProcAddress MulDiv GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA CompareStringW CompareStringA lstrlenA lstrcmpiW lstrlenW lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetTimeZoneInformation

user32

GetWindowThreadProcessId WaitMessage SendNotifyMessageA WindowFromDC InSendMessage MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetDialogBaseUnits GetMenuItemInfoA GetSysColorBrush GetMenuStringA InsertMenuA RemoveMenu SetParent GetSystemMenu AppendMenuA DeleteMenu SetCursorPos RedrawWindow InflateRect IsZoomed EndPaint BeginPaint GetWindowDC DrawTextExA DrawTextA TabbedTextOutA LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetDC ReleaseDC DestroyCursor SetRect SetWindowContextHelpId MapDialogRect GetMessageA TranslateMessage ValidateRect ShowOwnedPopups PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA IsClipboardFormatAvailable CheckRadioButton CheckDlgButton WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState EnableWindow SendMessageA UpdateWindow GetWindowRect CharLowerA CharLowerW CharUpperA CharUpperW IsChild GetFocus SetFocus IsWindow GetWindow SystemParametersInfoA SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor ScreenToClient EqualRect RegisterClipboardFormatA LockWindowUpdate GetDCEx UnionRect MapVirtualKeyA DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos GetKeyNameTextA WindowFromPoint GetTabbedTextExtentA PostThreadMessageA GetDlgItemInt CreateMenu FindWindowA RegisterWindowMessageA IsRectEmpty OffsetRect FillRect DrawIcon SetWindowRgn GetClientRect ClientToScreen InvalidateRect SetTimer KillTimer SetCapture GetParent PtInRect LoadCursorA GetSystemMetrics AdjustWindowRectEx SetCursor ReleaseCapture GetCursorPos IsIconic GetDlgCtrlID CopyRect GetWindowPlacement IntersectRect GrayStringA

gdi32

ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateSolidBrush CreateHatchBrush StretchDIBits GetCharWidthA CreateFontA GetTextMetricsA SetWindowExtEx CopyMetaFileA CreateFontIndirectA GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetRectRgn CombineRgn GetMapMode CreateMetaFileA CloseMetaFile DeleteMetaFile OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra GetTextExtentPoint32A SetPixel SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap CreateDCA DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx GetDeviceCaps CreatePen CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx Ellipse LPtoDP DPtoLP CreateEllipticRgn SetTextJustification

comdlg32

ReplaceTextA GetOpenFileNameA GetSaveFileNameA PrintDlgA FindTextA GetFileTitleA CommDlgExtendedError PageSetupDlgA

winspool.drv

GetJobA OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA GetFileSecurityA RegCloseKey RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCreateKeyA SetFileSecurityA RegDeleteValueA

shell32

DragQueryFileA SHGetFileInfoA ExtractIconA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleCreateLinkFromData OleCreateStaticFromData OleCreateFromFile OleCreateLinkToFile OleCreate OleLoad OleGetIconOfClass CreateItemMoniker CreateGenericComposite GetHGlobalFromILockBytes OleIsRunning CreateFileMoniker GetRunningObjectTable CoLockObjectExternal CoGetMalloc StgCreateDocfile StgOpenStorage StgIsStorageFile CreateOleAdviseHolder CreateDataAdviseHolder OleGetClipboard CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleCreateFromData OleQueryLinkFromData OleSetMenuDescriptor DoDragDrop IsAccelerator OleTranslateAccelerator OleRegGetMiscStatus OleRegEnumVerbs CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData ReleaseStgMedium CoTaskMemAlloc CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleSetContainedObject OleLockRunning CreateStreamOnHGlobal OleSaveToStream WriteClassStm OleSave OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance OleDestroyMenuDescriptor OleQueryCreateFromData OleCreateMenuDescriptor

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SysReAllocStringLen VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate LoadTypeLi VarDateFromStr

Name

.text

Size

640KB

Virtual Size

636KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

184KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ