5ea1e4353f9ddbda1e622a1daac518f7

Sharing

Copy URL Twitter E-mail

General

Target
5ea1e4353f9ddbda1e622a1daac518f7
Size 1016KB
Sample220309-s5cb8saah4
SHA256 03600a4f7296b322c40348594b789a94fd3726489d06ca31365f3337cd53a197
MD5 5ea1e4353f9ddbda1e622a1daac518f7
SHA1 70dc2de39fc023a1684ccb0ec8361989970f6f61
SHA512 673c894859f0411a0ece7f400d9da8ebb270bb3e5ada404779b0f1de1847eb1c6ea30c3544c57cbff2752c3c9c83b048169d57bb0e5c24fc37a04af194d02f8d
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5ea1e4353f9ddbda1e622a1daac518f7

.dll 1016KB

5ea1e4353f9ddbda1e622a1daac518f7

IMPHASH 087c9809507dfca4c3283e6c7539e91c
SHA256 03600a4f7296b322c40348594b789a94fd3726489d06ca31365f3337cd53a197
MD5 5ea1e4353f9ddbda1e622a1daac518f7
SHA1 70dc2de39fc023a1684ccb0ec8361989970f6f61
SHA512 673c894859f0411a0ece7f400d9da8ebb270bb3e5ada404779b0f1de1847eb1c6ea30c3544c57cbff2752c3c9c83b048169d57bb0e5c24fc37a04af194d02f8d
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

359493

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle Sleep SetHandleCount FileTimeToLocalFileTime GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetConsoleCtrlHandler GetACP GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetModuleFileNameW GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress SetLastError GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetFileType InterlockedExchange

user32

GetSysColorBrush LoadCursorA DeleteMenu SetCapture WindowFromPoint ReleaseCapture WaitMessage DestroyIcon GetDialogBaseUnits UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA InvalidateRect LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam GetKeyNameTextA MapVirtualKeyA IsRectEmpty SetParent UnionRect SetRect SetTimer KillTimer GetDCEx LockWindowUpdate DestroyMenu GetMenuItemInfoA InflateRect ScrollWindowEx MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx EndPaint SetScrollRange GetScrollRange SetScrollPos GetScrollPos ShowScrollBar UpdateWindow GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect GetScrollInfo SetScrollInfo PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow LoadIconA DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA TrackPopupMenu FillRect ShowWindow CreateWindowExW SendMessageA AppendMenuA GetSystemMenu DrawIcon GetClientRect GetSystemMetrics IsIconic DdeInitializeA DdeCreateStringHandleA DdeFreeStringHandle DdeDisconnect DdeConnect DdeUninitialize DdeNameService DdeFreeDataHandle DdeUnaccessData EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu DdeClientTransaction DdeAccessData SetForegroundWindow

gdi32

SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord OffsetViewportOrgEx EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetTextMetricsA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP CreateCompatibleBitmap GetCharWidthA CreateFontA StretchDIBits GetBkColor SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible StartDocA GetPixel CreateRectRgn GetWindowExtEx GetViewportExtEx GetObjectType GetDeviceCaps GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A ExtTextOutA BitBlt CreateCompatibleDC CreateFontIndirectA GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCA CopyMetaFileA SelectClipPath

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg CoTaskMemAlloc OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString ReadFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate

Name

.text

Size

632KB

Virtual Size

629KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

188KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ