546904aeb70f518ba83a0f947e885cac

Sharing

Copy URL Twitter E-mail

General

Target
546904aeb70f518ba83a0f947e885cac
Size 801KB
Sample220314-q2z8saaaar
SHA256 8bc4919ae91e2abd5f7c9258ef20b8905329f7fb5e88f03e6123ae6f0654d0c4
MD5 546904aeb70f518ba83a0f947e885cac
SHA1 74cb522f7388672ebc6d8790a452459898c3c58b
SHA512 710c754782eabbfb4ebde2b7126e72a3b4a40ab8760b9e44b2f24ff483b9d7cc49147abbd47a5d2989b790dc01b3e8f6398f21f8cf382042ed7be678c04f3a4a
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

546904aeb70f518ba83a0f947e885cac

.dll 801KB

546904aeb70f518ba83a0f947e885cac

IMPHASH cf621fdc818390e1d9f2acf7b5277b8f
SHA256 8bc4919ae91e2abd5f7c9258ef20b8905329f7fb5e88f03e6123ae6f0654d0c4
MD5 546904aeb70f518ba83a0f947e885cac
SHA1 74cb522f7388672ebc6d8790a452459898c3c58b
SHA512 710c754782eabbfb4ebde2b7126e72a3b4a40ab8760b9e44b2f24ff483b9d7cc49147abbd47a5d2989b790dc01b3e8f6398f21f8cf382042ed7be678c04f3a4a
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

292285

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

SymCleanup SymGetOptions SymUnloadModule64 SymGetLineFromAddr64 SymGetSymFromAddr64 SymLoadModuleExW SymSetOptions SymInitialize SymGetModuleInfo64

imagehlp

UnMapAndLoad MapAndLoad

kernel32

FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess GetVolumeInformationW GetShortPathNameW CreateFileW LocalFileTimeToFileTime SetFileAttributesW GetFileSizeEx SetErrorMode HeapAlloc HeapFree GetSystemTimeAsFileTime GetCommandLineA RtlUnwind RaiseException HeapReAlloc Sleep ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree SetFilePointer HeapCreate HeapDestroy GetStdHandle GetModuleFileNameA GetCurrentDirectoryA SetCurrentDirectoryA GetDriveTypeA GetFullPathNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetTimeZoneInformation SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA WriteFile ReadFile lstrcmpiW GetStringTypeExW DeleteFileW MoveFileW GetCurrentDirectoryW GlobalFlags SystemTimeToFileTime GetThreadLocale GetAtomNameW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW GetLocaleInfoW CompareStringA InterlockedExchange GlobalGetAtomNameW lstrlenA lstrcmpA FindFirstFileW FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW FindClose InterlockedDecrement FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW LoadLibraryA lstrcmpW GetVersionExA GetModuleHandleA GetCurrentProcessId GetModuleFileNameW GlobalFree CopyFileW GlobalSize GlobalAlloc GlobalLock GlobalUnlock lstrlenW MulDiv ExitProcess GetProcAddress LoadLibraryW GetLastError SetLastError GetModuleHandleW LocalFree FormatMessageW GetEnvironmentVariableW GetWindowsDirectoryW GetSystemDirectoryW SearchPathW MultiByteToWideChar FreeLibrary IsBadReadPtr LoadLibraryExW LockResource SizeofResource WideCharToMultiByte FindResourceW LoadResource VirtualAlloc

user32

GetMenuBarInfo DestroyMenu ReuseDDElParam UnpackDDElParam GetKeyNameTextW MapVirtualKeyW PostQuitMessage ValidateRect TranslateMessage GetMessageW ShowOwnedPopups IsRectEmpty SetWindowRgn SetTimer KillTimer IsZoomed WindowFromPoint GetSysColorBrush GetMenuItemInfoW GetDialogBaseUnits UnregisterClassW DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon CharUpperW GetDCEx LockWindowUpdate DrawMenuBar DefMDIChildProcW DefFrameProcW InflateRect GetDesktopWindow GetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW EnableMenuItem CheckMenuItem ScrollWindowEx MoveWindow SetWindowTextW IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus SetFocus GetWindowTextLengthW GetWindowTextW LoadAcceleratorsW SetActiveWindow DispatchMessageW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW LoadMenuW GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu SetCursor LoadCursorW InsertMenuItemW CreatePopupMenu SetRectEmpty GetCursorPos DestroyCursor SetCursorPos ReleaseCapture SetCapture RedrawWindow TranslateAcceleratorW TranslateMDISysAccel GetForegroundWindow BringWindowToTop CopyIcon InvalidateRect SystemParametersInfoW ShowWindow MessageBeep EndDeferWindowPos DeferWindowPos MapWindowPoints BeginDeferWindowPos IsWindow UpdateWindow LoadBitmapW GetWindowRect GetParent SetLastErrorEx FillRect SetRect DrawIcon LoadIconW GetClientRect GetSystemMetrics SendMessageW EnableWindow PostMessageW

gdi32

TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn GetWindowExtEx DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap SelectPalette RectVisible GetObjectType StartDocW PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetDCOrgEx CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP CreateEllipticRgn LPtoDP Ellipse GetTextMetricsW GetTextExtentPoint32W GetCharWidthW CreateFontW StretchDIBits GetBkColor PlayMetaFileRecord PtVisible GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn GetPixel SetBkColor RestoreDC SaveDC CreateDCW CopyMetaFileW GetDeviceCaps CreateFontIndirectW GetObjectW Rectangle StretchBlt CreateCompatibleDC CreateCompatibleBitmap EnumMetaFile GetStockObject SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

GetFileSecurityW SetFileSecurityW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueW RegCloseKey RegCreateKeyW

shell32

DragFinish DragQueryFileW ExtractIconW SHGetFileInfoW ShellExecuteW

shlwapi

PathRemoveExtensionW PathFindFileNameW PathRemoveFileSpecW PathStripToRootW PathFindExtensionW PathIsUNCW

ole32

WriteFmtUserTypeStg ReadClassStg CoTaskMemFree WriteClassStg ReleaseStgMedium CoTaskMemAlloc StringFromCLSID OleRegGetUserType ReadFmtUserTypeStg CreateBindCtx CoTreatAsClass OleDuplicateData CoUninitialize CoCreateInstance CoInitializeEx CoDisconnectObject StringFromGUID2 CLSIDFromString SetConvertStg

oleaut32

SysStringByteLen SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData LoadRegTypeLi LoadTypeLi RegisterTypeLi VariantInit VariantChangeType VariantClear SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime VarDateFromStr SysReAllocStringLen VarCyFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarBstrFromDate