311c3846bc308b9df997ef77657755ce

Sharing

Copy URL Twitter E-mail

General

Target
311c3846bc308b9df997ef77657755ce
Size 1.0MB
Sample220303-tkmsxabge6
SHA256 4ebb3a8eaf7ea56ec740d1d6027dd57858ca7647a3256be64d905df152864666
MD5 311c3846bc308b9df997ef77657755ce
SHA1 7f4382fc41974b498ef5c8a5e331368138faede7
SHA512 2fbcb4bf66abc3f066c1ea684acb7b532d63e9c4fe244ece8a7b964a7efd574c9b26ab64b21ce134656e8e6c7039083e3ca52495881c17f516f02629d7fd7aed
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

311c3846bc308b9df997ef77657755ce

.dll 1.0MB

311c3846bc308b9df997ef77657755ce

IMPHASH 570e13786e13464ca954b67524d1cbb1
SHA256 4ebb3a8eaf7ea56ec740d1d6027dd57858ca7647a3256be64d905df152864666
MD5 311c3846bc308b9df997ef77657755ce
SHA1 7f4382fc41974b498ef5c8a5e331368138faede7
SHA512 2fbcb4bf66abc3f066c1ea684acb7b532d63e9c4fe244ece8a7b964a7efd574c9b26ab64b21ce134656e8e6c7039083e3ca52495881c17f516f02629d7fd7aed
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

185152

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess ExitThread CreateThread HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCommandLineA GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetDiskFreeSpaceA GetTempFileNameA GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode LocalLock LocalUnlock SystemTimeToFileTime FileTimeToSystemTime GetShortPathNameA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetOEMCP GetCPInfo GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement DeleteCriticalSection InitializeCriticalSection RaiseException GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA InterlockedDecrement GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW GetModuleHandleA GetProcAddress FreeResource SetLastError GlobalFree CopyFileA FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA GetTickCount InterlockedExchange

user32

LockWindowUpdate GetSystemMenu SetParent SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetTabbedTextExtentA SetRect MessageBeep IsClipboardFormatAvailable DestroyIcon DeleteMenu WaitMessage GetWindowThreadProcessId ReleaseCapture WindowFromPoint SetCapture DestroyMenu GetMenuItemInfoA GetDialogBaseUnits LoadCursorA GetSysColorBrush InflateRect GetMessageA TranslateMessage GetCursorPos ValidateRect ShowOwnedPopups SetCursor PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA wsprintfA MapVirtualKeyA GetKeyNameTextA GetDC ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA GetDCEx GetPropA RemovePropA SendDlgItemMessageA GetFocus SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange CharLowerW CharLowerA CharUpperW SetMenuItemBitmaps CharUpperA EnableWindow SendMessageA LoadBitmapA ReleaseDC InvalidateRect LoadIconA FillRect GetSysColor DrawIcon GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible UpdateWindow GetMenu PostMessageA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo KillTimer SetTimer UnionRect IsRectEmpty LoadMenuA GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect UnpackDDElParam ReuseDDElParam LoadAcceleratorsA InsertMenuItemA SetPropA CreatePopupMenu GetClientRect GetSystemMetrics IsIconic RemoveMenu GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID AppendMenuA GetMenuStringA GetMenuState EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow PtInRect GetWindow GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow

gdi32

PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreateFontIndirectA SetRectRgn CombineRgn GetMapMode DPtoLP EnumMetaFile GetTextMetricsA GetCharWidthA StartPage EndPage SetAbortProc AbortDoc EndDoc StretchDIBits CreateFontA GetBkColor GetObjectType PlayMetaFileRecord SelectPalette GetStockObject CreatePatternBrush CreateDIBPatternBrushPt DeleteDC ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx GetPixel SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetTextExtentPoint32A BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC PatBlt CreateRectRgnIndirect CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateDCA CopyMetaFileA GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap StartDocA

comdlg32

PageSetupDlgA FindTextA GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError PrintDlgA ReplaceTextA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

RegSetValueA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegCreateKeyA SetFileSecurityA GetFileSecurityA RegCloseKey

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

comctl32

ImageList_GetIcon ImageList_AddMasked ImageList_Draw InitCommonControlsEx ord17 ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge ImageList_GetImageInfo

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

WriteClassStg OleRegGetUserType SetConvertStg CoTaskMemFree ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString WriteFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

548KB

Virtual Size

544KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

108KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

284KB

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ