794acf35d4123425b015d0570a0bf209

Sharing

Copy URL Twitter E-mail

General

Target
794acf35d4123425b015d0570a0bf209
Size 596KB
Sample220307-a6ymraaceq
SHA256 0c7a047e5f486b89b21ea881396be822a9e2b5a25a0d8a3adaeeba9eb383442c
MD5 794acf35d4123425b015d0570a0bf209
SHA1 02f7828911d4add2702c9ba4749b2ad02198cc1c
SHA512 398f516ec471d2c2ae76bc7e5e8616a01394a364d130e86d870b1ea7d00fc08ba334b913e415af3185ad5125ec21eb2e313724940a593394a1356fbd407879c6
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

794acf35d4123425b015d0570a0bf209

.dll 596KB

794acf35d4123425b015d0570a0bf209

IMPHASH 4b3c6568be69655a83355a8193247571
SHA256 0c7a047e5f486b89b21ea881396be822a9e2b5a25a0d8a3adaeeba9eb383442c
MD5 794acf35d4123425b015d0570a0bf209
SHA1 02f7828911d4add2702c9ba4749b2ad02198cc1c
SHA512 398f516ec471d2c2ae76bc7e5e8616a01394a364d130e86d870b1ea7d00fc08ba334b913e415af3185ad5125ec21eb2e313724940a593394a1356fbd407879c6
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

93760

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA GetSystemInfo GetCommandLineA ExitProcess RtlUnwind HeapReAlloc TerminateProcess SetStdHandle GetFileType HeapSize GetTimeZoneInformation LCMapStringA LCMapStringW HeapDestroy IsBadWritePtr GetStringTypeA GetStringTypeW SetHandleCount GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter IsBadCodePtr SetEnvironmentVariableA GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime WritePrivateProfileStringA GetOEMCP GetCPInfo TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA MulDiv GlobalAlloc FormatMessageA LocalFree GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersion CompareStringA lstrcmpiA CompareStringW GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement InterlockedIncrement HeapFree GetProcessHeap HeapAlloc GetNativeSystemInfo FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery Sleep FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte GetVersionExA GetThreadLocale GetLocaleInfoA GetACP HeapCreate InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect ReleaseDC GetDC SetWindowContextHelpId PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA wsprintfA SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem RegisterClipboardFormatA GetMenuCheckMarkDimensions LoadBitmapA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA KillTimer SetTimer EnableWindow SendMessageA LoadIconA GetSystemMenu AppendMenuA GetClientRect IsIconic GetSystemMetrics DrawIcon MapDialogRect MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA CheckMenuItem CharUpperA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindow PtInRect CopyRect GetWindowRect GetWindowPlacement SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID UnregisterClassA RegisterClassA

gdi32

GetBkColor GetTextColor GetRgnBox GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetMapMode PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA CreateRectRgnIndirect GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemAlloc StgOpenStorageOnILockBytes CoTaskMemFree CLSIDFromProgID CLSIDFromString OleRun CoCreateInstance CoUninitialize CoInitialize StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject

oleaut32

SysStringByteLen SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType SysAllocStringLen SafeArrayDestroy SystemTimeToVariantTime SysAllocString OleCreateFontIndirect GetErrorInfo SysAllocStringByteLen