e0fbf8d690a8db2d51f44c28d5883d45

Sharing

Copy URL Twitter E-mail

General

Target
e0fbf8d690a8db2d51f44c28d5883d45
Size 488KB
Sample220301-11mleabfg8
SHA256 4f50ec6f34b224ecd93051ba9579d1ab450ce5d3e41c230a4452be1924ff798e
MD5 e0fbf8d690a8db2d51f44c28d5883d45
SHA1 4436d75c2fc8d00e4f55f844577f3ce6d2b8b142
SHA512 603f2a7f217f4ce6c7210df0c51c99e6201efa2cd374ae171408b55728188819c17eb5c2518e583d10db4bbe661517c1051099f26820530e46e5c0538b1b8796
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

e0fbf8d690a8db2d51f44c28d5883d45

.dll 488KB

e0fbf8d690a8db2d51f44c28d5883d45

IMPHASH d02245ac5c961d83d0907c826d8ba5c0
SHA256 4f50ec6f34b224ecd93051ba9579d1ab450ce5d3e41c230a4452be1924ff798e
MD5 e0fbf8d690a8db2d51f44c28d5883d45
SHA1 4436d75c2fc8d00e4f55f844577f3ce6d2b8b142
SHA512 603f2a7f217f4ce6c7210df0c51c99e6201efa2cd374ae171408b55728188819c17eb5c2518e583d10db4bbe661517c1051099f26820530e46e5c0538b1b8796
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

150950

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW RaiseException GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetCommandLineA HeapAlloc HeapFree RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo FileTimeToSystemTime GetThreadLocale GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetModuleHandleW InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary CompareStringA lstrcmpW GetVersionExA LoadLibraryA GetCurrentProcessId GetModuleFileNameA GetModuleHandleA GetProcAddress GetLastError SetLastError GlobalFree FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA GlobalAlloc GlobalLock GlobalUnlock WideCharToMultiByte ExitProcess FindResourceA LoadResource LockResource QueryPerformanceCounter SizeofResource

user32

RegisterClipboardFormatA PostThreadMessageA LoadCursorA GetSysColorBrush DestroyMenu SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow SetActiveWindow GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus SendMessageA EnableWindow DrawIcon AppendMenuA ModifyMenuA EnableMenuItem CheckMenuItem CopyRect IsWindow GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA EndPaint MessageBeep GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA DispatchMessageA PostMessageA GetSystemMenu IsIconic GetClientRect MapWindowPoints InvalidateRect LoadIconA GetSystemMetrics CloseClipboard SetClipboardData EmptyClipboard OpenClipboard PtInRect InflateRect OffsetRect FrameRect SetCapture GetParent ReleaseCapture GetSysColor GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState TabbedTextOutA DrawTextA DrawTextExA GrayStringA ClientToScreen GetDC ReleaseDC GetWindowDC BeginPaint IsChild

gdi32

ExtSelectClipRgn DeleteDC CreatePen ScaleWindowExtEx CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetStockObject GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC GetDeviceCaps Ellipse SetBrushOrgEx CreateBitmap CreateBrushIndirect CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

ColorRGBToHLS ColorHLSToRGB PathFindFileNameA PathStripToRootA PathIsUNCA ColorAdjustLuma PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysFreeString SysAllocStringByteLen VariantClear VariantChangeType VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString SysStringLen