e98ad07e71af2ae9a37bb22e3c9a90e0

Sharing

Copy URL Twitter E-mail

General

Target
e98ad07e71af2ae9a37bb22e3c9a90e0
Size 801KB
Sample220314-k3ck8aeaa9
SHA256 19d5f6e2f8a745cc3c363fd343b60396bdca12f4ac21196ae07667a505f42769
MD5 e98ad07e71af2ae9a37bb22e3c9a90e0
SHA1 6f3e6ce276af3bfcae5011e11158409b9c14b032
SHA512 ae1e27a933a5c3b4978a7d049c1a628cfe9e0d17bb3889c6066ae7c0d11b1fe5ffa025373e500926e08fc3a7d24db05edb39d90539e113c227797a8fe95ff8f3
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

e98ad07e71af2ae9a37bb22e3c9a90e0

.dll 801KB

e98ad07e71af2ae9a37bb22e3c9a90e0

IMPHASH cf621fdc818390e1d9f2acf7b5277b8f
SHA256 19d5f6e2f8a745cc3c363fd343b60396bdca12f4ac21196ae07667a505f42769
MD5 e98ad07e71af2ae9a37bb22e3c9a90e0
SHA1 6f3e6ce276af3bfcae5011e11158409b9c14b032
SHA512 ae1e27a933a5c3b4978a7d049c1a628cfe9e0d17bb3889c6066ae7c0d11b1fe5ffa025373e500926e08fc3a7d24db05edb39d90539e113c227797a8fe95ff8f3
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

292285

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

SymCleanup SymGetOptions SymUnloadModule64 SymGetLineFromAddr64 SymGetSymFromAddr64 SymLoadModuleExW SymSetOptions SymInitialize SymGetModuleInfo64

imagehlp

UnMapAndLoad MapAndLoad

kernel32

FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess GetVolumeInformationW GetShortPathNameW CreateFileW LocalFileTimeToFileTime SetFileAttributesW GetFileSizeEx SetErrorMode HeapAlloc HeapFree GetSystemTimeAsFileTime GetCommandLineA RtlUnwind RaiseException HeapReAlloc Sleep ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree SetFilePointer HeapCreate HeapDestroy GetStdHandle GetModuleFileNameA GetCurrentDirectoryA SetCurrentDirectoryA GetDriveTypeA GetFullPathNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetTimeZoneInformation SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA WriteFile ReadFile lstrcmpiW GetStringTypeExW DeleteFileW MoveFileW GetCurrentDirectoryW GlobalFlags SystemTimeToFileTime GetThreadLocale GetAtomNameW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW GetLocaleInfoW CompareStringA InterlockedExchange GlobalGetAtomNameW lstrlenA lstrcmpA FindFirstFileW FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW FindClose InterlockedDecrement FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW LoadLibraryA lstrcmpW GetVersionExA GetModuleHandleA GetCurrentProcessId GetModuleFileNameW GlobalFree CopyFileW GlobalSize GlobalAlloc GlobalLock GlobalUnlock lstrlenW MulDiv ExitProcess GetProcAddress LoadLibraryW GetLastError SetLastError GetModuleHandleW LocalFree FormatMessageW GetEnvironmentVariableW GetWindowsDirectoryW GetSystemDirectoryW SearchPathW MultiByteToWideChar FreeLibrary IsBadReadPtr LoadLibraryExW LockResource SizeofResource WideCharToMultiByte FindResourceW LoadResource VirtualAlloc

user32

GetMenuBarInfo DestroyMenu ReuseDDElParam UnpackDDElParam GetKeyNameTextW MapVirtualKeyW PostQuitMessage ValidateRect TranslateMessage GetMessageW ShowOwnedPopups IsRectEmpty SetWindowRgn SetTimer KillTimer IsZoomed WindowFromPoint GetSysColorBrush GetMenuItemInfoW GetDialogBaseUnits UnregisterClassW DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon CharUpperW GetDCEx LockWindowUpdate DrawMenuBar DefMDIChildProcW DefFrameProcW InflateRect GetDesktopWindow GetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW EnableMenuItem CheckMenuItem ScrollWindowEx MoveWindow SetWindowTextW IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus SetFocus GetWindowTextLengthW GetWindowTextW LoadAcceleratorsW SetActiveWindow DispatchMessageW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW LoadMenuW GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu SetCursor LoadCursorW InsertMenuItemW CreatePopupMenu SetRectEmpty GetCursorPos DestroyCursor SetCursorPos ReleaseCapture SetCapture RedrawWindow TranslateAcceleratorW TranslateMDISysAccel GetForegroundWindow BringWindowToTop CopyIcon InvalidateRect SystemParametersInfoW ShowWindow MessageBeep EndDeferWindowPos DeferWindowPos MapWindowPoints BeginDeferWindowPos IsWindow UpdateWindow LoadBitmapW GetWindowRect GetParent SetLastErrorEx FillRect SetRect DrawIcon LoadIconW GetClientRect GetSystemMetrics SendMessageW EnableWindow PostMessageW

gdi32

TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn GetWindowExtEx DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap SelectPalette RectVisible GetObjectType StartDocW PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetDCOrgEx CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP CreateEllipticRgn LPtoDP Ellipse GetTextMetricsW GetTextExtentPoint32W GetCharWidthW CreateFontW StretchDIBits GetBkColor PlayMetaFileRecord PtVisible GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn GetPixel SetBkColor RestoreDC SaveDC CreateDCW CopyMetaFileW GetDeviceCaps CreateFontIndirectW GetObjectW Rectangle StretchBlt CreateCompatibleDC CreateCompatibleBitmap EnumMetaFile GetStockObject SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

GetFileSecurityW SetFileSecurityW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueW RegCloseKey RegCreateKeyW

shell32

DragFinish DragQueryFileW ExtractIconW SHGetFileInfoW ShellExecuteW

shlwapi

PathRemoveExtensionW PathFindFileNameW PathRemoveFileSpecW PathStripToRootW PathFindExtensionW PathIsUNCW

ole32

WriteFmtUserTypeStg ReadClassStg CoTaskMemFree WriteClassStg ReleaseStgMedium CoTaskMemAlloc StringFromCLSID OleRegGetUserType ReadFmtUserTypeStg CreateBindCtx CoTreatAsClass OleDuplicateData CoUninitialize CoCreateInstance CoInitializeEx CoDisconnectObject StringFromGUID2 CLSIDFromString SetConvertStg

oleaut32

SysStringByteLen SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData LoadRegTypeLi LoadTypeLi RegisterTypeLi VariantInit VariantChangeType VariantClear SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime VarDateFromStr SysReAllocStringLen VarCyFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarBstrFromDate