25b8419ce9aa00391bd9ec0fe6e43431

Sharing

Copy URL Twitter E-mail

General

Target
25b8419ce9aa00391bd9ec0fe6e43431
Size 488KB
Sample220301-s9b72acbbk
SHA256 a0cfb5933669cb5486704f2e91bff2b2656550cc7a84072ff5ef7217c3e5f0f8
MD5 25b8419ce9aa00391bd9ec0fe6e43431
SHA1 3ace2dbf4addb68b2a8d2d219015b5119358b75b
SHA512 2370c67a196bd3f9c0d3a62a25b50965a54b14c2384c318fed3f584ae0f954582869e9b63f4662eb379db0f2831220ea6cbe3bfd7d118e0e0a88bb74a126df40
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

25b8419ce9aa00391bd9ec0fe6e43431

.dll 488KB

25b8419ce9aa00391bd9ec0fe6e43431

IMPHASH f08242131de62ca6d7c4b2727b491b3d
SHA256 a0cfb5933669cb5486704f2e91bff2b2656550cc7a84072ff5ef7217c3e5f0f8
MD5 25b8419ce9aa00391bd9ec0fe6e43431
SHA1 3ace2dbf4addb68b2a8d2d219015b5119358b75b
SHA512 2370c67a196bd3f9c0d3a62a25b50965a54b14c2384c318fed3f584ae0f954582869e9b63f4662eb379db0f2831220ea6cbe3bfd7d118e0e0a88bb74a126df40
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

149490

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW RtlUnwind GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapReAlloc GetCommandLineA HeapAlloc HeapFree GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo InterlockedIncrement GetModuleHandleW TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc FileTimeToSystemTime GetThreadLocale GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary CompareStringA lstrcmpW GetVersionExA LoadLibraryA GetModuleHandleA GetProcAddress GlobalFree FormatMessageA LocalFree MulDiv lstrlenA GetCurrentProcessId GetModuleFileNameA GetLastError SetLastError MultiByteToWideChar LockResource GlobalUnlock SizeofResource WideCharToMultiByte GlobalAlloc GlobalLock LoadResource FindResourceA QueryPerformanceCounter ExitProcess

user32

RegisterClipboardFormatA PostThreadMessageA LoadCursorA GetSysColorBrush DestroyMenu GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect SetCursor PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow SetActiveWindow GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow CopyRect IsWindow EnableWindow SendMessageA SetClipboardData MapWindowPoints EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA MessageBeep GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA DispatchMessageA GetSystemMetrics OpenClipboard PostMessageA AppendMenuA EmptyClipboard InvalidateRect GetClientRect DrawIcon LoadIconA IsIconic GetSystemMenu CloseClipboard ReleaseCapture FrameRect GetSysColor OffsetRect InflateRect PtInRect GetParent SetCapture CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId GetSubMenu GetMenuItemCount GetMenuItemID IsChild

gdi32

ExtSelectClipRgn DeleteDC CreatePen ScaleWindowExtEx CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetStockObject GetWindowExtEx GetViewportExtEx GetObjectA DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC GetDeviceCaps SetBrushOrgEx CreateBitmap CreateBrushIndirect Ellipse CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

ColorRGBToHLS ColorHLSToRGB PathFindFileNameA PathStripToRootA PathIsUNCA ColorAdjustLuma PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysFreeString SysAllocStringByteLen VariantClear VariantChangeType VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString SysStringLen