4e815757648c694ed8425154b3f9ebe1

Sharing

Copy URL Twitter E-mail

General

Target
4e815757648c694ed8425154b3f9ebe1
Size 572KB
Sample220301-ld7kqsheb7
SHA256 c59a1a2cd3a7bfccc3119d8610fdf65f6548b805e983bcb489cd1982816b37ea
MD5 4e815757648c694ed8425154b3f9ebe1
SHA1 742b727be5e58da0d3662b010366f5dbc5af98e7
SHA512 161a3d200f778269b107a7424a436fa9f83005b3845703714ba86ad435f5543af005dbd44cdfcdc1523e8469fb59973b67a934d1d98d6bc940f442f67dc503f2
SSDEEP 12288:onEtDywy8SYlHD70WychG0QOCM8T9xvCtyDyPgyQz/VDNeg:onEtDywy8SYdnhG0QrM8hxKt7a1Ne
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4e815757648c694ed8425154b3f9ebe1

.dll 572KB

4e815757648c694ed8425154b3f9ebe1

IMPHASH e0b213ccd96f46d30dcd8e225f4e9fc9
SHA256 c59a1a2cd3a7bfccc3119d8610fdf65f6548b805e983bcb489cd1982816b37ea
MD5 4e815757648c694ed8425154b3f9ebe1
SHA1 742b727be5e58da0d3662b010366f5dbc5af98e7
SHA512 161a3d200f778269b107a7424a436fa9f83005b3845703714ba86ad435f5543af005dbd44cdfcdc1523e8469fb59973b67a934d1d98d6bc940f442f67dc503f2
SSDEEP 12288:onEtDywy8SYlHD70WychG0QOCM8T9xvCtyDyPgyQz/VDNeg:onEtDywy8SYdnhG0QrM8hxKt7a1Ne
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

217376

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap HeapSize HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalDeleteAtom GetModuleHandleA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetFileType InterlockedExchange

user32

MessageBeep DestroyMenu UnregisterClassA RegisterClipboardFormatA PostThreadMessageA EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen GetSysColorBrush ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos GetNextDlgGroupItem SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA CharUpperA EnableWindow SetWindowPos SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA MapWindowPoints SetCapture SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetForegroundWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible LineTo GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shell32

SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysAllocStringByteLen SysStringLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString