aa1207cc2c9dd358e1711c02250384c0

Sharing

Copy URL Twitter E-mail

General

Target
aa1207cc2c9dd358e1711c02250384c0
Size 1.0MB
Sample220225-kh522affb6
SHA256 d29e46337fd18cee8d8735e5399bfa62caec5d39f44330470b8aca0d4d276866
MD5 aa1207cc2c9dd358e1711c02250384c0
SHA1 d1a70620d93db75af44e12e52ff6bf1f35c19d2f
SHA512 c14707f451cdc94bb112e8131f40bd1dee702bffa015082826e80dcfaf0a590202b8a25dbd9a6e3a20f1b21d7a85a2c1350c0260a09414bdc13f04ddf0536623
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+uLVOe528JO6PC:6iRGcUY0UvDYNFtup5Ro6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

aa1207cc2c9dd358e1711c02250384c0

.dll 1.0MB

aa1207cc2c9dd358e1711c02250384c0

IMPHASH fb7aa40890c33e7cab21ed01eb149bf8
SHA256 d29e46337fd18cee8d8735e5399bfa62caec5d39f44330470b8aca0d4d276866
MD5 aa1207cc2c9dd358e1711c02250384c0
SHA1 d1a70620d93db75af44e12e52ff6bf1f35c19d2f
SHA512 c14707f451cdc94bb112e8131f40bd1dee702bffa015082826e80dcfaf0a590202b8a25dbd9a6e3a20f1b21d7a85a2c1350c0260a09414bdc13f04ddf0536623
SSDEEP 24576:6iIiGcU0Jmk092WkcEYNFs+uLVOe528JO6PC:6iRGcUY0UvDYNFtup5Ro6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

117652

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetFileType IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA GetStdHandle SetHandleCount IsBadWritePtr FatalAppExitA VirtualFree HeapCreate ExitProcess HeapDestroy HeapSize HeapReAlloc CreateThread ExitThread TerminateProcess GetCommandLineA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc HeapFree RtlUnwind LocalLock LocalUnlock GetProfileIntA lstrcpynW GetTickCount SetErrorMode GetCurrentDirectoryA SetFileAttributesA SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement CopyFileA GlobalSize FormatMessageA LocalFree SetLastError GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GlobalAlloc GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA lstrcmpA GlobalLock GlobalUnlock GlobalFree GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA SizeofResource FindResourceA LoadResource LockResource FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GetProcAddress MulDiv GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA CompareStringW CompareStringA lstrlenA lstrcmpiW lstrlenW lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetTimeZoneInformation

user32

GetWindowThreadProcessId WaitMessage SendNotifyMessageA WindowFromDC InSendMessage MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA CharNextA DestroyIcon GetDialogBaseUnits GetMenuItemInfoA GetSysColorBrush GetMenuStringA InsertMenuA RemoveMenu SetParent GetSystemMenu AppendMenuA DeleteMenu SetCursorPos RedrawWindow InflateRect IsZoomed EndPaint BeginPaint GetWindowDC DrawTextExA DrawTextA TabbedTextOutA LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetDC ReleaseDC DestroyCursor SetRect SetWindowContextHelpId MapDialogRect GetMessageA TranslateMessage ValidateRect ShowOwnedPopups PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA IsClipboardFormatAvailable CheckRadioButton CheckDlgButton WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState EnableWindow SendMessageA UpdateWindow GetWindowRect CharLowerA CharLowerW CharUpperA CharUpperW IsChild GetFocus SetFocus IsWindow GetWindow SystemParametersInfoA SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor ScreenToClient EqualRect RegisterClipboardFormatA LockWindowUpdate GetDCEx UnionRect MapVirtualKeyA DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos GetKeyNameTextA WindowFromPoint GetTabbedTextExtentA PostThreadMessageA GetDlgItemInt CreateMenu FindWindowA RegisterWindowMessageA IsRectEmpty OffsetRect FillRect DrawIcon SetWindowRgn GetClientRect ClientToScreen InvalidateRect SetTimer KillTimer SetCapture GetParent PtInRect LoadCursorA GetSystemMetrics AdjustWindowRectEx SetCursor ReleaseCapture GetCursorPos IsIconic GetDlgCtrlID CopyRect GetWindowPlacement IntersectRect GrayStringA

gdi32

ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ExtCreatePen CreateSolidBrush CreateHatchBrush StretchDIBits GetCharWidthA CreateFontA GetTextMetricsA SetWindowExtEx CopyMetaFileA CreateFontIndirectA GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetWindowOrgEx SetRectRgn CombineRgn GetMapMode CreateMetaFileA CloseMetaFile DeleteMetaFile OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra GetTextExtentPoint32A SetPixel SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap CreateDCA DeleteDC EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocA GetStockObject PatBlt Rectangle GetViewportOrgEx GetDeviceCaps CreatePen CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx Ellipse LPtoDP DPtoLP CreateEllipticRgn SetTextJustification

comdlg32

ReplaceTextA GetOpenFileNameA GetSaveFileNameA PrintDlgA FindTextA GetFileTitleA CommDlgExtendedError PageSetupDlgA

winspool.drv

GetJobA OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueA GetFileSecurityA RegCloseKey RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCreateKeyA SetFileSecurityA RegDeleteValueA

shell32

DragQueryFileA SHGetFileInfoA ExtractIconA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleCreateLinkFromData OleCreateStaticFromData OleCreateFromFile OleCreateLinkToFile OleCreate OleLoad OleGetIconOfClass CreateItemMoniker CreateGenericComposite GetHGlobalFromILockBytes OleIsRunning CreateFileMoniker GetRunningObjectTable CoLockObjectExternal CoGetMalloc StgCreateDocfile StgOpenStorage StgIsStorageFile CreateOleAdviseHolder CreateDataAdviseHolder OleGetClipboard CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleCreateFromData OleQueryLinkFromData OleSetMenuDescriptor DoDragDrop IsAccelerator OleTranslateAccelerator OleRegGetMiscStatus OleRegEnumVerbs CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData ReleaseStgMedium CoTaskMemAlloc CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleSetContainedObject OleLockRunning CreateStreamOnHGlobal OleSaveToStream WriteClassStm OleSave OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance OleDestroyMenuDescriptor OleQueryCreateFromData OleCreateMenuDescriptor

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SysReAllocStringLen VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate LoadTypeLi VarDateFromStr

Name

.text

Size

640KB

Virtual Size

636KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

184KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ