868fa82524f263d5d38ac940c74eacd1

Sharing

Copy URL Twitter E-mail

General

Target
868fa82524f263d5d38ac940c74eacd1
Size 801KB
Sample220314-pphmjafcc7
SHA256 e7397bc8fd2b07b688482fbb4d0cbcc7813d678c61bcb3b750e5559e9a65600a
MD5 868fa82524f263d5d38ac940c74eacd1
SHA1 cf58ecc27e493e90f9c4dc4632cc9256252454d1
SHA512 5b5a6626349fd1687140b63ad5714086fd85d63d8989ada5221a653de4faaf6f08cb823ff1453f4c07f83f0c54531704ac67d37c5b6af49d89061f2f866b4760
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

868fa82524f263d5d38ac940c74eacd1

.dll 801KB

868fa82524f263d5d38ac940c74eacd1

IMPHASH cf621fdc818390e1d9f2acf7b5277b8f
SHA256 e7397bc8fd2b07b688482fbb4d0cbcc7813d678c61bcb3b750e5559e9a65600a
MD5 868fa82524f263d5d38ac940c74eacd1
SHA1 cf58ecc27e493e90f9c4dc4632cc9256252454d1
SHA512 5b5a6626349fd1687140b63ad5714086fd85d63d8989ada5221a653de4faaf6f08cb823ff1453f4c07f83f0c54531704ac67d37c5b6af49d89061f2f866b4760
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

292285

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

SymCleanup SymGetOptions SymUnloadModule64 SymGetLineFromAddr64 SymGetSymFromAddr64 SymLoadModuleExW SymSetOptions SymInitialize SymGetModuleInfo64

imagehlp

UnMapAndLoad MapAndLoad

kernel32

FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess GetVolumeInformationW GetShortPathNameW CreateFileW LocalFileTimeToFileTime SetFileAttributesW GetFileSizeEx SetErrorMode HeapAlloc HeapFree GetSystemTimeAsFileTime GetCommandLineA RtlUnwind RaiseException HeapReAlloc Sleep ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree SetFilePointer HeapCreate HeapDestroy GetStdHandle GetModuleFileNameA GetCurrentDirectoryA SetCurrentDirectoryA GetDriveTypeA GetFullPathNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetTimeZoneInformation SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA WriteFile ReadFile lstrcmpiW GetStringTypeExW DeleteFileW MoveFileW GetCurrentDirectoryW GlobalFlags SystemTimeToFileTime GetThreadLocale GetAtomNameW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW GetLocaleInfoW CompareStringA InterlockedExchange GlobalGetAtomNameW lstrlenA lstrcmpA FindFirstFileW FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW FindClose InterlockedDecrement FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW LoadLibraryA lstrcmpW GetVersionExA GetModuleHandleA GetCurrentProcessId GetModuleFileNameW GlobalFree CopyFileW GlobalSize GlobalAlloc GlobalLock GlobalUnlock lstrlenW MulDiv ExitProcess GetProcAddress LoadLibraryW GetLastError SetLastError GetModuleHandleW LocalFree FormatMessageW GetEnvironmentVariableW GetWindowsDirectoryW GetSystemDirectoryW SearchPathW MultiByteToWideChar FreeLibrary IsBadReadPtr LoadLibraryExW LockResource SizeofResource WideCharToMultiByte FindResourceW LoadResource VirtualAlloc

user32

GetMenuBarInfo DestroyMenu ReuseDDElParam UnpackDDElParam GetKeyNameTextW MapVirtualKeyW PostQuitMessage ValidateRect TranslateMessage GetMessageW ShowOwnedPopups IsRectEmpty SetWindowRgn SetTimer KillTimer IsZoomed WindowFromPoint GetSysColorBrush GetMenuItemInfoW GetDialogBaseUnits UnregisterClassW DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon CharUpperW GetDCEx LockWindowUpdate DrawMenuBar DefMDIChildProcW DefFrameProcW InflateRect GetDesktopWindow GetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW EnableMenuItem CheckMenuItem ScrollWindowEx MoveWindow SetWindowTextW IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus SetFocus GetWindowTextLengthW GetWindowTextW LoadAcceleratorsW SetActiveWindow DispatchMessageW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW LoadMenuW GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu SetCursor LoadCursorW InsertMenuItemW CreatePopupMenu SetRectEmpty GetCursorPos DestroyCursor SetCursorPos ReleaseCapture SetCapture RedrawWindow TranslateAcceleratorW TranslateMDISysAccel GetForegroundWindow BringWindowToTop CopyIcon InvalidateRect SystemParametersInfoW ShowWindow MessageBeep EndDeferWindowPos DeferWindowPos MapWindowPoints BeginDeferWindowPos IsWindow UpdateWindow LoadBitmapW GetWindowRect GetParent SetLastErrorEx FillRect SetRect DrawIcon LoadIconW GetClientRect GetSystemMetrics SendMessageW EnableWindow PostMessageW

gdi32

TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn GetWindowExtEx DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap SelectPalette RectVisible GetObjectType StartDocW PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetDCOrgEx CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP CreateEllipticRgn LPtoDP Ellipse GetTextMetricsW GetTextExtentPoint32W GetCharWidthW CreateFontW StretchDIBits GetBkColor PlayMetaFileRecord PtVisible GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn GetPixel SetBkColor RestoreDC SaveDC CreateDCW CopyMetaFileW GetDeviceCaps CreateFontIndirectW GetObjectW Rectangle StretchBlt CreateCompatibleDC CreateCompatibleBitmap EnumMetaFile GetStockObject SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

GetFileSecurityW SetFileSecurityW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueW RegCloseKey RegCreateKeyW

shell32

DragFinish DragQueryFileW ExtractIconW SHGetFileInfoW ShellExecuteW

shlwapi

PathRemoveExtensionW PathFindFileNameW PathRemoveFileSpecW PathStripToRootW PathFindExtensionW PathIsUNCW

ole32

WriteFmtUserTypeStg ReadClassStg CoTaskMemFree WriteClassStg ReleaseStgMedium CoTaskMemAlloc StringFromCLSID OleRegGetUserType ReadFmtUserTypeStg CreateBindCtx CoTreatAsClass OleDuplicateData CoUninitialize CoCreateInstance CoInitializeEx CoDisconnectObject StringFromGUID2 CLSIDFromString SetConvertStg

oleaut32

SysStringByteLen SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData LoadRegTypeLi LoadTypeLi RegisterTypeLi VariantInit VariantChangeType VariantClear SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime VarDateFromStr SysReAllocStringLen VarCyFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarBstrFromDate