4f493f56c14bdd97d151c61b5f876189

Sharing

Copy URL Twitter E-mail

General

Target
4f493f56c14bdd97d151c61b5f876189
Size 615KB
Sample220303-1fwzcaecaj
SHA256 305af9404a6faedb5e5f2e75d1d41eb38c6d69db6abbf8f84ae8de4a3f82bba2
MD5 4f493f56c14bdd97d151c61b5f876189
SHA1 1bdc749e85351e83362fef73c6bb83a87b5f3500
SHA512 f52f35be586957eba23821a7251a8d2c858a06af6059de58f358593f5117e3abc369123e3eaf93c537aded51d30a770df8c1fbc119f4d314d290d3586ba0d5d4
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

4f493f56c14bdd97d151c61b5f876189

.dll 615KB

4f493f56c14bdd97d151c61b5f876189

IMPHASH bb2e319682f72745317e92a26483f973
SHA256 305af9404a6faedb5e5f2e75d1d41eb38c6d69db6abbf8f84ae8de4a3f82bba2
MD5 4f493f56c14bdd97d151c61b5f876189
SHA1 1bdc749e85351e83362fef73c6bb83a87b5f3500
SHA512 f52f35be586957eba23821a7251a8d2c858a06af6059de58f358593f5117e3abc369123e3eaf93c537aded51d30a770df8c1fbc119f4d314d290d3586ba0d5d4
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

240544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA HeapFree GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale GetModuleHandleW GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA GetLastError SetLastError MultiByteToWideChar lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA ExitProcess lstrcatA lstrlenA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeEnvironmentStringsA FreeLibrary

user32

RegisterClipboardFormatA PostThreadMessageA DestroyMenu SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow ValidateRect PostQuitMessage GetWindowThreadProcessId EndPaint BeginPaint GetWindowDC ClientToScreen GetCursorPos WindowFromPoint IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect EnableWindow SendMessageA GetClientRect ReleaseCapture GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow SetMenuItemBitmaps GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA GetClassNameA PtInRect InvalidateRect SetCapture SetCursor GetSysColor IsWindow InflateRect GetWindowRect GetDC ReleaseDC GetParent CopyIcon LoadCursorA MessageBeep SetWindowRgn GetSysColorBrush DrawStateA GetFocus TabbedTextOutA DrawTextA DrawTextExA GrayStringA RedrawWindow PostMessageA ScreenToClient ChildWindowFromPoint LoadIconA AppendMenuA GetSystemMenu GetSystemMetrics DrawIcon IsIconic CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA LoadBitmapA GetMenuCheckMarkDimensions

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SelectObject GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx CreateFontIndirectA SetMapMode SetBkMode RestoreDC SaveDC GetDeviceCaps CreateRectRgnIndirect SetBkColor SetTextColor GetClipBox CreateBitmap DeleteObject BitBlt Escape ExtTextOutA TextOutA RectVisible PtVisible CreateCompatibleDC CreateCompatibleBitmap Ellipse FillRgn CreateEllipticRgnIndirect CreateSolidBrush SetPixelV GetTextExtentPoint32A GetStockObject GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegOpenKeyExA RegQueryValueA RegCloseKey

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString VariantClear