42fcbbea71f490710fcc0b336a9f6c94

Sharing

Copy URL Twitter E-mail

General

Target
42fcbbea71f490710fcc0b336a9f6c94
Size 612KB
Sample220310-mja96ahfer
SHA256 2f2f9b9f448657133561e7f7c35d6fc9b0fb6305a118a4e9fca3804e14d454d3
MD5 42fcbbea71f490710fcc0b336a9f6c94
SHA1 0265833d3e426218c84d2b120225fbc49f954fc2
SHA512 38b17f90512dc46c753aa92633c09ec9c8c742198b72d81d387641ec75ad9a3c135856be975e7bb6812c02e711a04da12ffb8fea2021c3b32973bdb18ec59f41
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

42fcbbea71f490710fcc0b336a9f6c94

.dll 612KB

42fcbbea71f490710fcc0b336a9f6c94

IMPHASH 53dedb5b7ba9393b690bb5ddcd3da470
SHA256 2f2f9b9f448657133561e7f7c35d6fc9b0fb6305a118a4e9fca3804e14d454d3
MD5 42fcbbea71f490710fcc0b336a9f6c94
SHA1 0265833d3e426218c84d2b120225fbc49f954fc2
SHA512 38b17f90512dc46c753aa92633c09ec9c8c742198b72d81d387641ec75ad9a3c135856be975e7bb6812c02e711a04da12ffb8fea2021c3b32973bdb18ec59f41
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

245977

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap RaiseException HeapSize HeapDestroy HeapCreate VirtualFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetDriveTypeA GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA CreateFileA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentDirectoryA WritePrivateProfileStringA GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetCurrentProcessId GetModuleFileNameA InterlockedDecrement FindFirstFileA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileA FindClose FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary LoadLibraryA lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv lstrcpyA ExitProcess Sleep LoadResource LockResource SizeofResource FindResourceA GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetStdHandle InterlockedExchange

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA PostThreadMessageA MapDialogRect CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA GetActiveWindow ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetWindowThreadProcessId IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints GetKeyState SetForegroundWindow UpdateWindow GetMenu PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect SetScrollInfo GetDlgCtrlID DefWindowProcA CallWindowProcA CharUpperA EnableWindow GetWindow GetWindowLongA SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu CharNextA ReleaseCapture SetCapture IsIconic UnregisterClassA DestroyMenu GetSysColorBrush GetClassLongA SetWindowContextHelpId GetClassNameA GetDesktopWindow GetWindowRect GetCaretPos GetParent SendMessageA IsWindowVisible DispatchMessageA TranslateMessage PeekMessageA SetRectEmpty GetSysColor GetSystemMetrics GetClientRect ReleaseDC GetDC SetScrollPos IsRectEmpty SetScrollRange OffsetRect InflateRect PtInRect SetRect InvalidateRect SetCursor LoadCursorA ScreenToClient GetCursorPos KillTimer SetTimer EqualRect LoadIconA ShowWindow DrawIcon CheckMenuItem

gdi32

SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC ScaleViewportExtEx CreatePen GetMapMode GetBkColor GetTextColor GetRgnBox SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx BitBlt DeleteObject MoveToEx LineTo ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC CreateRectRgnIndirect CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDeviceCaps GetTextExtentPoint32A CreateCompatibleDC CreateCompatibleBitmap GetStockObject SelectObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegEnumKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetMalloc

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString VariantClear