9e88c3e23bb0b7b75169382682ab72a1

Sharing

Copy URL Twitter E-mail

General

Target
9e88c3e23bb0b7b75169382682ab72a1
Size 790KB
Sample220308-lzhthadce9
SHA256 3d6f78711729ccb2fc8a7a527722bb8e53a385d78fd6c4af24f773bc3a98e992
MD5 9e88c3e23bb0b7b75169382682ab72a1
SHA1 9d922f305122ac63b75d2e101c8cf4a3ef19f7c6
SHA512 1d3e27890ce1c48ee4f8dc7de00f08eb381cd7c6e3f5c0beb746d174fd76bca16af8605589135cd7893629969bf99acf8ceefbdafc9acdef1013e535d5a6df77
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

9e88c3e23bb0b7b75169382682ab72a1

.dll 790KB

9e88c3e23bb0b7b75169382682ab72a1

IMPHASH e33cd8dc97d96e317214c44457f3bf92
SHA256 3d6f78711729ccb2fc8a7a527722bb8e53a385d78fd6c4af24f773bc3a98e992
MD5 9e88c3e23bb0b7b75169382682ab72a1
SHA1 9d922f305122ac63b75d2e101c8cf4a3ef19f7c6
SHA512 1d3e27890ce1c48ee4f8dc7de00f08eb381cd7c6e3f5c0beb746d174fd76bca16af8605589135cd7893629969bf99acf8ceefbdafc9acdef1013e535d5a6df77
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

316020

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetCommandLineA Sleep ExitThread CreateThread RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree FatalAppExitA GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings RtlUnwind GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetFileTime GetFileSizeEx GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetModuleHandleW GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiA GetThreadLocale GetStringTypeExA DeleteFileA MoveFileA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CopyFileA GlobalSize FormatMessageA LocalFree lstrlenW MulDiv InterlockedDecrement GetModuleFileNameW lstrlenA GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA FreeEnvironmentStringsW ExitProcess

user32

UnregisterClassA SetRectEmpty InvalidateRect TranslateAcceleratorA BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA GetMenuBarInfo LoadMenuA ReuseDDElParam UnpackDDElParam SetRect SetTimer KillTimer GetKeyNameTextA MapVirtualKeyA IsRectEmpty SetParent UnionRect GetDCEx LockWindowUpdate EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect GetMenuStringA DestroyMenu GetMenuItemInfoA InflateRect ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos GetDialogBaseUnits GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow EnableWindow LoadIconA AppendMenuA GetSystemMenu IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx CharUpperA DestroyIcon GetSysColorBrush WaitMessage ReleaseCapture LoadCursorA WindowFromPoint SetCapture DeleteMenu InsertMenuA EndDeferWindowPos RemoveMenu SendMessageA GetSystemMetrics DrawIcon IsIconic GetClientRect DdeInitializeA DdeCreateStringHandleA DdeFreeStringHandle DdeDisconnect DdeConnect DdeUninitialize DdeNameService DdeFreeDataHandle DdeUnaccessData DdeAccessData DdeClientTransaction PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA GetMenuState UnhookWindowsHookEx

gdi32

PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetDeviceCaps CreatePen ExtCreatePen ArcTo CreateHatchBrush CopyMetaFileA CreateDCA GetTextMetricsA GetCharWidthA CreateFontA StretchDIBits CreateCompatibleBitmap CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetBkColor ScaleWindowExtEx GetCurrentPositionEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape PtVisible TextOutA CreateSolidBrush CreateBitmap StartDocA GetPixel GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A ExtTextOutA BitBlt CreateCompatibleDC CreateFontIndirectA GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx RectVisible

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegSetValueA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyA

shell32

ExtractIconA DragFinish DragQueryFileA SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA PathRemoveExtensionA PathRemoveFileSpecW

ole32

StringFromGUID2 CoDisconnectObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass CoCreateInstance ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CoUninitialize CoInitializeEx StringFromCLSID

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate