a1c6b18312f45b1a7e499b6b0e522f04

Sharing

Copy URL Twitter E-mail

General

Target
a1c6b18312f45b1a7e499b6b0e522f04
Size 1016KB
Sample220309-v5fe1abbg7
SHA256 e98dd238be30029fbaf43ca1e87760a3181ac1c9f2a543d7e3acd08adedabe97
MD5 a1c6b18312f45b1a7e499b6b0e522f04
SHA1 ec4fb1146c8220089c65d2b504151dac4ad92d14
SHA512 6aaf5af8ed88934886b4cca5dce55220d4c8e64b514ba66e2ab74386da42176c8fa7e0a2cba98edc320d707450ec3484c72ce18b2a2d783cb265f8d4cadace51
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

a1c6b18312f45b1a7e499b6b0e522f04

.dll 1016KB

a1c6b18312f45b1a7e499b6b0e522f04

IMPHASH 087c9809507dfca4c3283e6c7539e91c
SHA256 e98dd238be30029fbaf43ca1e87760a3181ac1c9f2a543d7e3acd08adedabe97
MD5 a1c6b18312f45b1a7e499b6b0e522f04
SHA1 ec4fb1146c8220089c65d2b504151dac4ad92d14
SHA512 6aaf5af8ed88934886b4cca5dce55220d4c8e64b514ba66e2ab74386da42176c8fa7e0a2cba98edc320d707450ec3484c72ce18b2a2d783cb265f8d4cadace51
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

359493

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle Sleep SetHandleCount FileTimeToLocalFileTime GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetConsoleCtrlHandler GetACP GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetAtomNameA GetOEMCP GetCPInfo CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GlobalFlags GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetModuleFileNameW GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress SetLastError GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetFileType InterlockedExchange

user32

GetSysColorBrush LoadCursorA DeleteMenu SetCapture WindowFromPoint ReleaseCapture WaitMessage DestroyIcon GetDialogBaseUnits UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA InvalidateRect LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam GetKeyNameTextA MapVirtualKeyA IsRectEmpty SetParent UnionRect SetRect SetTimer KillTimer GetDCEx LockWindowUpdate DestroyMenu GetMenuItemInfoA InflateRect ScrollWindowEx MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx EndPaint SetScrollRange GetScrollRange SetScrollPos GetScrollPos ShowScrollBar UpdateWindow GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect GetScrollInfo SetScrollInfo PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow LoadIconA DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA TrackPopupMenu FillRect ShowWindow CreateWindowExW SendMessageA AppendMenuA GetSystemMenu DrawIcon GetClientRect GetSystemMetrics IsIconic DdeInitializeA DdeCreateStringHandleA DdeFreeStringHandle DdeDisconnect DdeConnect DdeUninitialize DdeNameService DdeFreeDataHandle DdeUnaccessData EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu DdeClientTransaction DdeAccessData SetForegroundWindow

gdi32

SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord OffsetViewportOrgEx EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetTextMetricsA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP CreateCompatibleBitmap GetCharWidthA CreateFontA StretchDIBits GetBkColor SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible StartDocA GetPixel CreateRectRgn GetWindowExtEx GetViewportExtEx GetObjectType GetDeviceCaps GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A ExtTextOutA BitBlt CreateCompatibleDC CreateFontIndirectA GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCA CopyMetaFileA SelectClipPath

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg CoTaskMemAlloc OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString ReadFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate

Name

.text

Size

632KB

Virtual Size

629KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

188KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ