638329065ac481714f4235ec68072798

Sharing

Copy URL Twitter E-mail

General

Target
638329065ac481714f4235ec68072798
Size 801KB
Sample220314-pdrq3aghhm
SHA256 dd20054e64e6c8d824827b0c86cfe3d725eff4ef0e3bf3ab57a5c5119df86f11
MD5 638329065ac481714f4235ec68072798
SHA1 1c4f68ff7c7cc8d154f7e507ee68509e121c748c
SHA512 e4869b5ed175099bb345532ca970dc6c8263970e5a79427e346bb56e01160b71a22940f090392f1feaea9270ed81ac34442d80877d3f269f2a0b94917d9992c3
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

638329065ac481714f4235ec68072798

.dll 801KB

638329065ac481714f4235ec68072798

IMPHASH cf621fdc818390e1d9f2acf7b5277b8f
SHA256 dd20054e64e6c8d824827b0c86cfe3d725eff4ef0e3bf3ab57a5c5119df86f11
MD5 638329065ac481714f4235ec68072798
SHA1 1c4f68ff7c7cc8d154f7e507ee68509e121c748c
SHA512 e4869b5ed175099bb345532ca970dc6c8263970e5a79427e346bb56e01160b71a22940f090392f1feaea9270ed81ac34442d80877d3f269f2a0b94917d9992c3
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

292285

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

SymCleanup SymGetOptions SymUnloadModule64 SymGetLineFromAddr64 SymGetSymFromAddr64 SymLoadModuleExW SymSetOptions SymInitialize SymGetModuleInfo64

imagehlp

UnMapAndLoad MapAndLoad

kernel32

FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess GetVolumeInformationW GetShortPathNameW CreateFileW LocalFileTimeToFileTime SetFileAttributesW GetFileSizeEx SetErrorMode HeapAlloc HeapFree GetSystemTimeAsFileTime GetCommandLineA RtlUnwind RaiseException HeapReAlloc Sleep ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree SetFilePointer HeapCreate HeapDestroy GetStdHandle GetModuleFileNameA GetCurrentDirectoryA SetCurrentDirectoryA GetDriveTypeA GetFullPathNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetTimeZoneInformation SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA WriteFile ReadFile lstrcmpiW GetStringTypeExW DeleteFileW MoveFileW GetCurrentDirectoryW GlobalFlags SystemTimeToFileTime GetThreadLocale GetAtomNameW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW GetLocaleInfoW CompareStringA InterlockedExchange GlobalGetAtomNameW lstrlenA lstrcmpA FindFirstFileW FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW FindClose InterlockedDecrement FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW LoadLibraryA lstrcmpW GetVersionExA GetModuleHandleA GetCurrentProcessId GetModuleFileNameW GlobalFree CopyFileW GlobalSize GlobalAlloc GlobalLock GlobalUnlock lstrlenW MulDiv ExitProcess GetProcAddress LoadLibraryW GetLastError SetLastError GetModuleHandleW LocalFree FormatMessageW GetEnvironmentVariableW GetWindowsDirectoryW GetSystemDirectoryW SearchPathW MultiByteToWideChar FreeLibrary IsBadReadPtr LoadLibraryExW LockResource SizeofResource WideCharToMultiByte FindResourceW LoadResource VirtualAlloc

user32

GetMenuBarInfo DestroyMenu ReuseDDElParam UnpackDDElParam GetKeyNameTextW MapVirtualKeyW PostQuitMessage ValidateRect TranslateMessage GetMessageW ShowOwnedPopups IsRectEmpty SetWindowRgn SetTimer KillTimer IsZoomed WindowFromPoint GetSysColorBrush GetMenuItemInfoW GetDialogBaseUnits UnregisterClassW DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon CharUpperW GetDCEx LockWindowUpdate DrawMenuBar DefMDIChildProcW DefFrameProcW InflateRect GetDesktopWindow GetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW EnableMenuItem CheckMenuItem ScrollWindowEx MoveWindow SetWindowTextW IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus SetFocus GetWindowTextLengthW GetWindowTextW LoadAcceleratorsW SetActiveWindow DispatchMessageW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW LoadMenuW GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu SetCursor LoadCursorW InsertMenuItemW CreatePopupMenu SetRectEmpty GetCursorPos DestroyCursor SetCursorPos ReleaseCapture SetCapture RedrawWindow TranslateAcceleratorW TranslateMDISysAccel GetForegroundWindow BringWindowToTop CopyIcon InvalidateRect SystemParametersInfoW ShowWindow MessageBeep EndDeferWindowPos DeferWindowPos MapWindowPoints BeginDeferWindowPos IsWindow UpdateWindow LoadBitmapW GetWindowRect GetParent SetLastErrorEx FillRect SetRect DrawIcon LoadIconW GetClientRect GetSystemMetrics SendMessageW EnableWindow PostMessageW

gdi32

TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn GetWindowExtEx DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap SelectPalette RectVisible GetObjectType StartDocW PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetDCOrgEx CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP CreateEllipticRgn LPtoDP Ellipse GetTextMetricsW GetTextExtentPoint32W GetCharWidthW CreateFontW StretchDIBits GetBkColor PlayMetaFileRecord PtVisible GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn GetPixel SetBkColor RestoreDC SaveDC CreateDCW CopyMetaFileW GetDeviceCaps CreateFontIndirectW GetObjectW Rectangle StretchBlt CreateCompatibleDC CreateCompatibleBitmap EnumMetaFile GetStockObject SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

GetFileSecurityW SetFileSecurityW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueW RegCloseKey RegCreateKeyW

shell32

DragFinish DragQueryFileW ExtractIconW SHGetFileInfoW ShellExecuteW

shlwapi

PathRemoveExtensionW PathFindFileNameW PathRemoveFileSpecW PathStripToRootW PathFindExtensionW PathIsUNCW

ole32

WriteFmtUserTypeStg ReadClassStg CoTaskMemFree WriteClassStg ReleaseStgMedium CoTaskMemAlloc StringFromCLSID OleRegGetUserType ReadFmtUserTypeStg CreateBindCtx CoTreatAsClass OleDuplicateData CoUninitialize CoCreateInstance CoInitializeEx CoDisconnectObject StringFromGUID2 CLSIDFromString SetConvertStg

oleaut32

SysStringByteLen SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData LoadRegTypeLi LoadTypeLi RegisterTypeLi VariantInit VariantChangeType VariantClear SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime VarDateFromStr SysReAllocStringLen VarCyFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarBstrFromDate