8ebabc32253e54c2709c7bdec84ae6d0

Sharing

Copy URL Twitter E-mail

General

Target
8ebabc32253e54c2709c7bdec84ae6d0
Size 684KB
Sample220311-1dl2csedgl
SHA256 492cb237e3867a842de5ff1db6dc5f72f501dc16052fceff529a277778c550d1
MD5 8ebabc32253e54c2709c7bdec84ae6d0
SHA1 1fa7f4298e086818a4b4c99205ae79a37b826758
SHA512 b81880797e635a9f45b0fd6c403c9a4b6e94f5a269de9947771cc20793036ff1795ba6d5bce0148ba2b795556c53bf0c96a23f4f8a6037971228929ee9641a88
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

8ebabc32253e54c2709c7bdec84ae6d0

.dll 684KB

8ebabc32253e54c2709c7bdec84ae6d0

IMPHASH 830353e93f5c80d691f8ce13b3aa74da
SHA256 492cb237e3867a842de5ff1db6dc5f72f501dc16052fceff529a277778c550d1
MD5 8ebabc32253e54c2709c7bdec84ae6d0
SHA1 1fa7f4298e086818a4b4c99205ae79a37b826758
SHA512 b81880797e635a9f45b0fd6c403c9a4b6e94f5a269de9947771cc20793036ff1795ba6d5bce0148ba2b795556c53bf0c96a23f4f8a6037971228929ee9641a88
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

245260

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree RtlUnwind VirtualAlloc HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap RaiseException HeapSize HeapDestroy HeapCreate VirtualFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle Sleep SetHandleCount GetFileType GetStartupInfoA LocalFileTimeToFileTime GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime GetShortPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers WriteFile DeleteFileA MoveFileA GetCurrentDirectoryA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle EnterCriticalSection TlsGetValue LeaveCriticalSection InterlockedIncrement FindResourceExA GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetCurrentProcessId InterlockedDecrement FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA FormatMessageA MulDiv SetLastError GetProcAddress GetModuleHandleA LoadLibraryA VirtualProtect SizeofResource ExitProcess GetFileSize GlobalAlloc GlobalFree ReadFile GlobalUnlock GlobalReAlloc SetFilePointer CreateFileA CloseHandle GlobalLock GetLastError FindResourceA LoadResource LockResource LocalAlloc LocalFree lstrlenA lstrcmpiA GetStringTypeExA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion FreeEnvironmentStringsA InterlockedExchange

user32

SetParent SetRect SetTimer KillTimer WindowFromPoint PostQuitMessage ShowOwnedPopups GetSysColorBrush LoadCursorA GetMenuItemInfoA UnregisterClassA GetDCEx SetCapture DestroyIcon ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty SetMenu RedrawWindow TranslateAcceleratorA TranslateMDISysAccel BringWindowToTop DrawMenuBar DefMDIChildProcA DefFrameProcA GetMessageA TranslateMessage GetCursorPos ValidateRect EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog RegisterWindowMessageA GetSystemMenu SendDlgItemMessageA WinHelpA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsWindow GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow IsWindowVisible GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect DeferWindowPos CopyRect CharUpperA EnableWindow SendMessageA PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindow DeleteMenu IsRectEmpty IsZoomed InflateRect UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetWindowThreadProcessId LoadIconA SetCursor InvalidateRect ReleaseDC GetDC LockWindowUpdate ScreenToClient ClientToScreen GetClientRect ShowWindow UpdateWindow IsWindowEnabled GetDlgItem GetParent PostMessageA GetWindowLongA GetWindowRect SetFocus GetFocus GetAsyncKeyState GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu GetCapture GetActiveWindow SetActiveWindow MapDialogRect SetWindowPos IsChild

gdi32

OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC CreatePatternBrush GetStockObject SetViewportOrgEx CreateSolidBrush CreateCompatibleBitmap CreateFontIndirectA CreateRectRgnIndirect SetRectRgn CombineRgn PatBlt GetCharWidthA CreateFontA StretchDIBits GetTextMetricsA GetTextExtentPoint32A GetBkColor EnumFontFamiliesExA Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel CreateRectRgn CreateDIBitmap IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDeviceCaps CreateCompatibleDC SelectObject StretchBlt BitBlt DeleteObject CreatePalette SelectPalette RealizePalette SelectClipRgn

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

GetFileSecurityA SetFileSecurityA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen