c9a23c57bd24ffbabd91b2899529a33b

Sharing

Copy URL Twitter E-mail

General

Target
c9a23c57bd24ffbabd91b2899529a33b
Size 512KB
Sample220228-bax7saebgj
SHA256 c2c5876b193acb7dc6fa0dbbbdadce31a83bafaac16193158acab85e6e47d903
MD5 c9a23c57bd24ffbabd91b2899529a33b
SHA1 e62bac4d9e4bc51b20810aed6f0a291265821062
SHA512 fd80351a6056690b56bdf2a992c63865947aabd7a04fc575835e35550f529fee95913ba054455492457b523357136153ce274f099ec4c0f360c7308e10a1f549
SSDEEP 12288:lVQtkBkJDg2fwP3bYahn5JbEDW78XUlNozF:nQvg2fwvbhNEDWLk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c9a23c57bd24ffbabd91b2899529a33b

.dll 512KB

c9a23c57bd24ffbabd91b2899529a33b

IMPHASH 8bd78ab6a29d83d324b20c7cf33d1483
SHA256 c2c5876b193acb7dc6fa0dbbbdadce31a83bafaac16193158acab85e6e47d903
MD5 c9a23c57bd24ffbabd91b2899529a33b
SHA1 e62bac4d9e4bc51b20810aed6f0a291265821062
SHA512 fd80351a6056690b56bdf2a992c63865947aabd7a04fc575835e35550f529fee95913ba054455492457b523357136153ce274f099ec4c0f360c7308e10a1f549
SSDEEP 12288:lVQtkBkJDg2fwP3bYahn5JbEDW78XUlNozF:nQvg2fwvbhNEDWLk
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

165554

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapAlloc HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetCommandLineA GetProcessHeap RaiseException SetStdHandle GetFileType HeapSize VirtualFree HeapDestroy HeapCreate GetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep GetACP GetTimeZoneInformation SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo GlobalFlags FileTimeToSystemTime GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError CreateDirectoryA ExitProcess LoadLibraryA GetProcAddress lstrlenA CompareStringW CompareStringA GetVersion FindResourceA LoadResource LockResource SizeofResource GetLastError WideCharToMultiByte MultiByteToWideChar TerminateProcess InterlockedExchange

user32

IsRectEmpty SetRect InvalidateRgn GetNextDlgGroupItem UnregisterClassA RegisterClipboardFormatA PostThreadMessageA SetWindowContextHelpId MapDialogRect GetWindowThreadProcessId SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA CharNextA ReleaseCapture SetCapture GetSysColorBrush GetClassLongA DestroyMenu DrawTextExA DrawTextA TabbedTextOutA GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu LoadCursorA UpdateWindow LoadBitmapA MessageBeep GetSystemMetrics LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon GetWindowRect GetSysColor EnableWindow KillTimer SetTimer InvalidateRect PostMessageA CharUpperA GetDlgItem

gdi32

PtVisible ExtSelectClipRgn DeleteDC CreateBitmap GetStockObject ScaleWindowExtEx CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA CreateSolidBrush DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC GetDeviceCaps BitBlt CreateCompatibleDC GetObjectA CreateFontA RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoTaskMemAlloc CoTaskMemFree CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringLen VariantInit VariantChangeType VariantClear SysAllocStringByteLen SysFreeString SysStringLen

winmm

PlaySoundA