59f034ebde1786169a2d76b3d152ee2d

Sharing

Copy URL Twitter E-mail

General

Target
59f034ebde1786169a2d76b3d152ee2d
Size 790KB
Sample220308-mbc4sagchm
SHA256 f370003d0400c0582bf8add8d2f796b2a2a66e1d19dcea00df5c7275ef6b2e3b
MD5 59f034ebde1786169a2d76b3d152ee2d
SHA1 85ae0d3f1d51178c3f1cb6f336a0f546c7e5dba7
SHA512 f5edb121b57a92fceeb85ef6457d508703d1306a59102f63c06cdc94b1be29efb9317f60ca57af272b4c67247a25c9251b8dfecc6cb616db03b3158e55051eff
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

59f034ebde1786169a2d76b3d152ee2d

.dll 790KB

59f034ebde1786169a2d76b3d152ee2d

IMPHASH e33cd8dc97d96e317214c44457f3bf92
SHA256 f370003d0400c0582bf8add8d2f796b2a2a66e1d19dcea00df5c7275ef6b2e3b
MD5 59f034ebde1786169a2d76b3d152ee2d
SHA1 85ae0d3f1d51178c3f1cb6f336a0f546c7e5dba7
SHA512 f5edb121b57a92fceeb85ef6457d508703d1306a59102f63c06cdc94b1be29efb9317f60ca57af272b4c67247a25c9251b8dfecc6cb616db03b3158e55051eff
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

316020

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetCommandLineA Sleep ExitThread CreateThread RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree FatalAppExitA GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings RtlUnwind GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetFileTime GetFileSizeEx GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetModuleHandleW GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiA GetThreadLocale GetStringTypeExA DeleteFileA MoveFileA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CopyFileA GlobalSize FormatMessageA LocalFree lstrlenW MulDiv InterlockedDecrement GetModuleFileNameW lstrlenA GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA InterlockedExchange GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA FreeEnvironmentStringsW ExitProcess

user32

UnregisterClassA SetRectEmpty InvalidateRect TranslateAcceleratorA BringWindowToTop CreatePopupMenu InsertMenuItemA LoadAcceleratorsA GetMenuBarInfo LoadMenuA ReuseDDElParam UnpackDDElParam SetRect SetTimer KillTimer GetKeyNameTextA MapVirtualKeyA IsRectEmpty SetParent UnionRect GetDCEx LockWindowUpdate EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect GetMenuStringA DestroyMenu GetMenuItemInfoA InflateRect ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos GetDialogBaseUnits GetTopWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow EnableWindow LoadIconA AppendMenuA GetSystemMenu IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx CharUpperA DestroyIcon GetSysColorBrush WaitMessage ReleaseCapture LoadCursorA WindowFromPoint SetCapture DeleteMenu InsertMenuA EndDeferWindowPos RemoveMenu SendMessageA GetSystemMetrics DrawIcon IsIconic GetClientRect DdeInitializeA DdeCreateStringHandleA DdeFreeStringHandle DdeDisconnect DdeConnect DdeUninitialize DdeNameService DdeFreeDataHandle DdeUnaccessData DdeAccessData DdeClientTransaction PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA GetMenuState UnhookWindowsHookEx

gdi32

PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetDeviceCaps CreatePen ExtCreatePen ArcTo CreateHatchBrush CopyMetaFileA CreateDCA GetTextMetricsA GetCharWidthA CreateFontA StretchDIBits CreateCompatibleBitmap CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetBkColor ScaleWindowExtEx GetCurrentPositionEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape PtVisible TextOutA CreateSolidBrush CreateBitmap StartDocA GetPixel GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A ExtTextOutA BitBlt CreateCompatibleDC CreateFontIndirectA GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx RectVisible

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegSetValueA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyA

shell32

ExtractIconA DragFinish DragQueryFileA SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA PathRemoveExtensionA PathRemoveFileSpecW

ole32

StringFromGUID2 CoDisconnectObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass CoCreateInstance ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CoUninitialize CoInitializeEx StringFromCLSID

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate