079dc00a1a688f8bde03ee5df65c7c71

Sharing

Copy URL Twitter E-mail

General

Target
079dc00a1a688f8bde03ee5df65c7c71
Size 572KB
Sample220301-kfc88shcc2
SHA256 f99fec79ae1085f01be068f4f47bb534e616d1684292f763eed0145d31cfd8f6
MD5 079dc00a1a688f8bde03ee5df65c7c71
SHA1 cc81b521e48e672c03db530d91a7450cde797f35
SHA512 6865d659cc952cc29ba93540ed33eea9984e34f8d8d6bc9d800c26bd855b0891276e3fc04360a33cb57426d76cd9de1a80db772215a814f29b73adaab679b8f8
SSDEEP 12288:onEtDywy8SYlHD70WychG0QOCM8T9xvCXyDyPgyQz/VDNeg:onEtDywy8SYdnhG0QrM8hxKX7a1Ne
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

079dc00a1a688f8bde03ee5df65c7c71

.dll 572KB

079dc00a1a688f8bde03ee5df65c7c71

IMPHASH e0b213ccd96f46d30dcd8e225f4e9fc9
SHA256 f99fec79ae1085f01be068f4f47bb534e616d1684292f763eed0145d31cfd8f6
MD5 079dc00a1a688f8bde03ee5df65c7c71
SHA1 cc81b521e48e672c03db530d91a7450cde797f35
SHA512 6865d659cc952cc29ba93540ed33eea9984e34f8d8d6bc9d800c26bd855b0891276e3fc04360a33cb57426d76cd9de1a80db772215a814f29b73adaab679b8f8
SSDEEP 12288:onEtDywy8SYlHD70WychG0QOCM8T9xvCXyDyPgyQz/VDNeg:onEtDywy8SYdnhG0QrM8hxKX7a1Ne
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

217376

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap HeapSize HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalDeleteAtom GetModuleHandleA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetFileType InterlockedExchange

user32

MessageBeep DestroyMenu UnregisterClassA RegisterClipboardFormatA PostThreadMessageA EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen GetSysColorBrush ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos GetNextDlgGroupItem SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA CharUpperA EnableWindow SetWindowPos SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA MapWindowPoints SetCapture SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetForegroundWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible LineTo GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shell32

SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysAllocStringByteLen SysStringLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString