28e0c79a9c5c5d8ae165f30780040e5c

Sharing

Copy URL Twitter E-mail

General

Target
28e0c79a9c5c5d8ae165f30780040e5c
Size 611KB
Sample220304-kwk9saebc6
SHA256 016736f6af408db867e8afaa458f7375b30948838eb44bf93fa1e33b7206fb51
MD5 28e0c79a9c5c5d8ae165f30780040e5c
SHA1 8ea002ca0389f787abc21f5c6846e9d571f5aa26
SHA512 743e46ad18d41825376ab7e803d5b42b0aa2353231cda7433dbab1b81661b8d2e785dc1d7799fbb1a384d6bb66d7840958c3145aad7660c29b3879b437378fcf
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

28e0c79a9c5c5d8ae165f30780040e5c

.dll 611KB

28e0c79a9c5c5d8ae165f30780040e5c

IMPHASH bb2e319682f72745317e92a26483f973
SHA256 016736f6af408db867e8afaa458f7375b30948838eb44bf93fa1e33b7206fb51
MD5 28e0c79a9c5c5d8ae165f30780040e5c
SHA1 8ea002ca0389f787abc21f5c6846e9d571f5aa26
SHA512 743e46ad18d41825376ab7e803d5b42b0aa2353231cda7433dbab1b81661b8d2e785dc1d7799fbb1a384d6bb66d7840958c3145aad7660c29b3879b437378fcf
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

241392

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc GetCommandLineA RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA HeapFree GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RtlUnwind GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale GetModuleHandleW GetOEMCP GetCPInfo InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA GetLastError SetLastError MultiByteToWideChar lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA ExitProcess lstrcatA lstrlenA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeEnvironmentStringsA FreeLibrary

user32

RegisterClipboardFormatA PostThreadMessageA DestroyMenu SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow ValidateRect PostQuitMessage GetWindowThreadProcessId EndPaint BeginPaint GetWindowDC ClientToScreen GetCursorPos WindowFromPoint IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect CopyRect EnableWindow SendMessageA GetClientRect ReleaseCapture GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow SetMenuItemBitmaps GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA GetClassNameA PtInRect InvalidateRect SetCapture SetCursor GetSysColor IsWindow InflateRect GetWindowRect GetDC ReleaseDC GetParent CopyIcon LoadCursorA MessageBeep SetWindowRgn GetSysColorBrush DrawStateA GetFocus TabbedTextOutA DrawTextA DrawTextExA GrayStringA RedrawWindow PostMessageA ScreenToClient ChildWindowFromPoint LoadIconA AppendMenuA GetSystemMenu GetSystemMetrics DrawIcon IsIconic CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA LoadBitmapA GetMenuCheckMarkDimensions

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SelectObject GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx CreateFontIndirectA SetMapMode SetBkMode RestoreDC SaveDC GetDeviceCaps CreateRectRgnIndirect SetBkColor SetTextColor GetClipBox CreateBitmap DeleteObject BitBlt Escape ExtTextOutA TextOutA RectVisible PtVisible CreateCompatibleDC CreateCompatibleBitmap Ellipse FillRgn CreateEllipticRgnIndirect CreateSolidBrush SetPixelV GetTextExtentPoint32A GetStockObject GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegOpenKeyExA RegQueryValueA RegCloseKey

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString VariantClear