a0880dc0ceeb63560b2f2378338f7ba2

Sharing

Copy URL Twitter E-mail

General

Target
a0880dc0ceeb63560b2f2378338f7ba2
Size 612KB
Sample220310-rmvkesfff7
SHA256 ea4440c1dbf22affb174fa93e7abfeb0e58db904fac9b92cb74d6a74b5e31197
MD5 a0880dc0ceeb63560b2f2378338f7ba2
SHA1 a64804617d396547c16bcd15566d0a7d889a2920
SHA512 842067bd796f36d955d84493367414ad21d9c1be7c6c0ac0023e47f31edb01f161eb625e5f196292aab40b81aace879be435894b3bd59a2b5b5a34c94cb4cfc8
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

a0880dc0ceeb63560b2f2378338f7ba2

.dll 612KB

a0880dc0ceeb63560b2f2378338f7ba2

IMPHASH 53dedb5b7ba9393b690bb5ddcd3da470
SHA256 ea4440c1dbf22affb174fa93e7abfeb0e58db904fac9b92cb74d6a74b5e31197
MD5 a0880dc0ceeb63560b2f2378338f7ba2
SHA1 a64804617d396547c16bcd15566d0a7d889a2920
SHA512 842067bd796f36d955d84493367414ad21d9c1be7c6c0ac0023e47f31edb01f161eb625e5f196292aab40b81aace879be435894b3bd59a2b5b5a34c94cb4cfc8
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

245977

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap RaiseException HeapSize HeapDestroy HeapCreate VirtualFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetDriveTypeA GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA CreateFileA GetFullPathNameA GetVolumeInformationA GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentDirectoryA WritePrivateProfileStringA GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetCurrentProcessId GetModuleFileNameA InterlockedDecrement FindFirstFileA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileA FindClose FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary LoadLibraryA lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv lstrcpyA ExitProcess Sleep LoadResource LockResource SizeofResource FindResourceA GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetStdHandle InterlockedExchange

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA PostThreadMessageA MapDialogRect CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA GetActiveWindow ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetWindowThreadProcessId IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx CopyAcceleratorTableA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints GetKeyState SetForegroundWindow UpdateWindow GetMenu PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect SetScrollInfo GetDlgCtrlID DefWindowProcA CallWindowProcA CharUpperA EnableWindow GetWindow GetWindowLongA SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu CharNextA ReleaseCapture SetCapture IsIconic UnregisterClassA DestroyMenu GetSysColorBrush GetClassLongA SetWindowContextHelpId GetClassNameA GetDesktopWindow GetWindowRect GetCaretPos GetParent SendMessageA IsWindowVisible DispatchMessageA TranslateMessage PeekMessageA SetRectEmpty GetSysColor GetSystemMetrics GetClientRect ReleaseDC GetDC SetScrollPos IsRectEmpty SetScrollRange OffsetRect InflateRect PtInRect SetRect InvalidateRect SetCursor LoadCursorA ScreenToClient GetCursorPos KillTimer SetTimer EqualRect LoadIconA ShowWindow DrawIcon CheckMenuItem

gdi32

SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC ScaleViewportExtEx CreatePen GetMapMode GetBkColor GetTextColor GetRgnBox SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx BitBlt DeleteObject MoveToEx LineTo ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC CreateRectRgnIndirect CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDeviceCaps GetTextExtentPoint32A CreateCompatibleDC CreateCompatibleBitmap GetStockObject SelectObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegEnumKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetMalloc

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString VariantClear