f296dd643762632e58a27118c3c8069f

Sharing

Copy URL Twitter E-mail

General

Target
f296dd643762632e58a27118c3c8069f
Size 520KB
Sample220228-zmlaragedn
SHA256 b49f98bb4db1854472b53e13b4f28d9e858e3389c3d3c15a877bc258ac2ef5df
MD5 f296dd643762632e58a27118c3c8069f
SHA1 6c4096b0cc680eec9495c78a1e61204f47b09574
SHA512 745d489f04b47bc030cf84377f550377ef1c015f75e27eae6389f8bddb2eb5a5349a67893689b3fa3ea5ef8a50ad284cd6edf9fa65f49d1c3f2f11eafc152ae4
SSDEEP 12288:AASStHx1vVHO+1Hx54zg0p9n4WNL7XE0UdX:ecHfv4qxKnp9l7XE0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f296dd643762632e58a27118c3c8069f

.dll 520KB

f296dd643762632e58a27118c3c8069f

IMPHASH 42fe0d732d1bb90c6a7a1bcfb8ef88aa
SHA256 b49f98bb4db1854472b53e13b4f28d9e858e3389c3d3c15a877bc258ac2ef5df
MD5 f296dd643762632e58a27118c3c8069f
SHA1 6c4096b0cc680eec9495c78a1e61204f47b09574
SHA512 745d489f04b47bc030cf84377f550377ef1c015f75e27eae6389f8bddb2eb5a5349a67893689b3fa3ea5ef8a50ad284cd6edf9fa65f49d1c3f2f11eafc152ae4
SSDEEP 12288:AASStHx1vVHO+1Hx54zg0p9n4WNL7XE0UdX:ecHfv4qxKnp9l7XE0
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

149870

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedIncrement WritePrivateProfileStringA InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource CloseHandle GlobalAddAtomA SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA lstrcmpiA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA UnhandledExceptionFilter InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCapture ClientToScreen wsprintfA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA IsChild GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos RegisterClipboardFormatA SetForegroundWindow GetClientRect GetMenu GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect CharUpperA EnableWindow SetWindowPos SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect MessageBoxA MapWindowPoints DestroyMenu GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus PostMessageA PostQuitMessage GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState IsWindowEnabled GetLastActivePopup GetParent

gdi32

GetBkColor GetTextColor GetRgnBox GetMapMode GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA LineTo RectVisible PtVisible GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx TextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFileInfoA

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString