edf57b0bf05feea2df19020bd6766978

Sharing

Copy URL Twitter E-mail

General

Target
edf57b0bf05feea2df19020bd6766978
Size 572KB
Sample220301-m3d56abcfn
SHA256 461eb4b1c0810c43a9d096fa3cbd3441c918ca5cf0e455d07c436c3c7a2b2cbc
MD5 edf57b0bf05feea2df19020bd6766978
SHA1 e36a4f668134d0a4d5a526082775c12d5f7cad50
SHA512 03298946a8b7930f62bd5c37a021fe3a749d5fdedef5ef2a188720dcffeb6c23cc9a7ef992649f43f85e061447f6caf24e72fdc89cb5e6c7ce8d0c0ec6f434b1
SSDEEP 12288:onEtDywy8SYlHD70WychG0QOCM8T9xvCFyDyPgyQz/VDNeg:onEtDywy8SYdnhG0QrM8hxKF7a1Ne
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

edf57b0bf05feea2df19020bd6766978

.dll 572KB

edf57b0bf05feea2df19020bd6766978

IMPHASH e0b213ccd96f46d30dcd8e225f4e9fc9
SHA256 461eb4b1c0810c43a9d096fa3cbd3441c918ca5cf0e455d07c436c3c7a2b2cbc
MD5 edf57b0bf05feea2df19020bd6766978
SHA1 e36a4f668134d0a4d5a526082775c12d5f7cad50
SHA512 03298946a8b7930f62bd5c37a021fe3a749d5fdedef5ef2a188720dcffeb6c23cc9a7ef992649f43f85e061447f6caf24e72fdc89cb5e6c7ce8d0c0ec6f434b1
SSDEEP 12288:onEtDywy8SYlHD70WychG0QOCM8T9xvCFyDyPgyQz/VDNeg:onEtDywy8SYdnhG0QrM8hxKF7a1Ne
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

217376

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap HeapSize HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalDeleteAtom GetModuleHandleA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetFileType InterlockedExchange

user32

MessageBeep DestroyMenu UnregisterClassA RegisterClipboardFormatA PostThreadMessageA EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen GetSysColorBrush ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos GetNextDlgGroupItem SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA CharUpperA EnableWindow SetWindowPos SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA MapWindowPoints SetCapture SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetForegroundWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible LineTo GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shell32

SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysAllocStringByteLen SysStringLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString