0fa49ff4189758a823598c7e80ab996e

Sharing

Copy URL Twitter E-mail

General

Target
0fa49ff4189758a823598c7e80ab996e
Size 996KB
Sample220315-pew26sbcc7
SHA256 fcf862ae4f50fb01c9c8b708ad868d4b7ee9f1d7558672e4b7d315c78c63b0b6
MD5 0fa49ff4189758a823598c7e80ab996e
SHA1 83732dfca73b67edac6eae0bd92b00083f27dd81
SHA512 bb296530d9aff7c703336242de704c75b73c44bb63087f982f88ee35c27cb04d2a6a199a25d109de7193f73161a11af4dccc645f341b39731ab94bff92d8eb56
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

0fa49ff4189758a823598c7e80ab996e

.dll 996KB

0fa49ff4189758a823598c7e80ab996e

IMPHASH d912f984e2094116df83ddb751c9d2cc
SHA256 fcf862ae4f50fb01c9c8b708ad868d4b7ee9f1d7558672e4b7d315c78c63b0b6
MD5 0fa49ff4189758a823598c7e80ab996e
SHA1 83732dfca73b67edac6eae0bd92b00083f27dd81
SHA512 bb296530d9aff7c703336242de704c75b73c44bb63087f982f88ee35c27cb04d2a6a199a25d109de7193f73161a11af4dccc645f341b39731ab94bff92d8eb56
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

120398

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom GlobalAlloc lstrcmpW lstrcmpA EnumResourceLanguagesW GetVersion ConvertDefaultLocale SetThreadPriority ResumeThread WaitForSingleObject SetEvent SuspendThread CreateEventW GlobalAddAtomW FreeResource GlobalFree GlobalFindAtomW LocalFree FormatMessageW GlobalSize CopyFileW GlobalFlags LocalAlloc GlobalReAlloc CreateFileW LocalReAlloc SetErrorMode FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetFileTime SetFileAttributesW GetFileAttributesW GetFileTime GetPrivateProfileIntW WritePrivateProfileStringW GetPrivateProfileStringW GetCurrentDirectoryW lstrlenA GlobalGetAtomNameW GetAtomNameW GetVersionExW GetShortPathNameW GetFullPathNameW GetVolumeInformationW FindFirstFileW MulDiv FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile ReadFile LoadLibraryW lstrcmpiW lstrlenW GetThreadLocale GetStringTypeExW DeleteFileW MoveFileW GetModuleFileNameW GetModuleHandleW GlobalLock GlobalUnlock SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle GetTimeZoneInformation SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP GetLocaleInfoW IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler InitializeCriticalSection GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId ExitThread CreateThread VirtualProtect GetSystemInfo VirtualQuery GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapSize Sleep GetModuleFileNameA GetStdHandle WriteFile HeapReAlloc VirtualAlloc EnterCriticalSection FatalAppExitA LeaveCriticalSection DeleteCriticalSection VirtualFree HeapCreate HeapDestroy IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentThread InterlockedDecrement SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetProcAddress RaiseException GetProcessHeap GetVersionExA GetCommandLineA GetCurrentThreadId HeapAlloc HeapFree GetLastError RtlUnwind LoadResource LockResource SizeofResource FindResourceW ExitProcess GlobalHandle

user32

LockWindowUpdate SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorW MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect IsRectEmpty CopyAcceleratorTableW CharNextW GetDialogBaseUnits DestroyIcon GetSysColorBrush WaitMessage ReleaseCapture LoadCursorW WindowFromPoint SetCapture DeleteMenu UnregisterClassW InsertMenuW RemoveMenu GetMenuStringW SystemParametersInfoW DestroyMenu GetMenuItemInfoW InflateRect ScrollWindowEx MoveWindow SetWindowTextW IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetDCEx MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect MapVirtualKeyW GetKeyNameTextW CopyRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW ShowOwnedPopups SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow PostThreadMessageW UnionRect SetParent RegisterClipboardFormatW UnpackDDElParam ReuseDDElParam LoadMenuW LoadAcceleratorsW InsertMenuItemW GetMessagePos CreatePopupMenu IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions GetFocus GetParent ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem PostMessageW PostQuitMessage LoadBitmapW CharUpperW UnhookWindowsHookEx GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW PtInRect KillTimer SetTimer GetClientRect IsIconic DrawIcon GetSystemMetrics SendMessageW GetSystemMenu AppendMenuW ShowWindow LoadIconW EnableWindow FillRect SetRect GetDC ReleaseDC LoadImageW GetScrollPos UnregisterClassA

gdi32

SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw GetViewportExtEx PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen OffsetWindowOrgEx CreateHatchBrush CreateRectRgnIndirect PatBlt GetDCOrgEx CreateFontIndirectW GetTextExtentPoint32W CopyMetaFileW CreateDCW SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsW GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthW CreateFontW SelectClipPath SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutW TextOutW RectVisible PtVisible StartDocW ExtCreatePen CreatePalette CreateRectRgn GetClipRgn SelectClipRgn SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC SetDIBColorTable GetPixel CreateDiscardableBitmap CreateSolidBrush GetPaletteEntries GetDIBColorTable BitBlt CreateCompatibleDC GetObjectW GetDIBits SelectObject CreateDIBSection GdiFlush StretchDIBits GetDeviceCaps RealizePalette SetDIBitsToDevice DeleteObject GetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteValueW RegSetValueExW RegCreateKeyExW RegSetValueW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegOpenKeyW RegCloseKey RegQueryValueExW RegCreateKeyW

shell32

ExtractIconW DragFinish DragQueryFileW SHGetFileInfoW

shlwapi

PathIsUNCW PathFindExtensionW PathRemoveExtensionW PathStripToRootW PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData CoRevokeClassObject StringFromCLSID CoTaskMemAlloc ReleaseStgMedium CreateBindCtx ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CreateStreamOnHGlobal CoTreatAsClass

oleaut32

VariantTimeToSystemTime LoadTypeLi VarBstrFromDate VarDecFromStr VarBstrFromDec VarBstrFromCy VarCyFromStr SysReAllocStringLen VarDateFromStr SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SysAllocString SafeArrayDestroy SystemTimeToVariantTime SysFreeString OleCreatePictureIndirect SysAllocStringLen VariantClear VariantChangeType SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantInit

msvfw32

DrawDibSetPalette DrawDibRealize DrawDibDraw DrawDibOpen DrawDibClose