5af023821a7f2971e796395b4cc2f300

Sharing

Copy URL Twitter E-mail

General

Target
5af023821a7f2971e796395b4cc2f300
Size 996KB
Sample220315-pexcyadaal
SHA256 5df60f2fde243f2e884089c5c19335a22e25d56ec03dd1b3b2f3be0160201467
MD5 5af023821a7f2971e796395b4cc2f300
SHA1 8333ff0b924808d493718ab432201ccabf295df9
SHA512 867d3e32da666aa340a77fe40d5d0efaac1926eeefc1c27eeb09ee7e4f56384284070122aca03b8fc2dbeca1e4701dc6677f6829ec30366451b7f3f0f41e0b39
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

5af023821a7f2971e796395b4cc2f300

.dll 996KB

5af023821a7f2971e796395b4cc2f300

IMPHASH d912f984e2094116df83ddb751c9d2cc
SHA256 5df60f2fde243f2e884089c5c19335a22e25d56ec03dd1b3b2f3be0160201467
MD5 5af023821a7f2971e796395b4cc2f300
SHA1 8333ff0b924808d493718ab432201ccabf295df9
SHA512 867d3e32da666aa340a77fe40d5d0efaac1926eeefc1c27eeb09ee7e4f56384284070122aca03b8fc2dbeca1e4701dc6677f6829ec30366451b7f3f0f41e0b39
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

120398

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom GlobalAlloc lstrcmpW lstrcmpA EnumResourceLanguagesW GetVersion ConvertDefaultLocale SetThreadPriority ResumeThread WaitForSingleObject SetEvent SuspendThread CreateEventW GlobalAddAtomW FreeResource GlobalFree GlobalFindAtomW LocalFree FormatMessageW GlobalSize CopyFileW GlobalFlags LocalAlloc GlobalReAlloc CreateFileW LocalReAlloc SetErrorMode FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetFileTime SetFileAttributesW GetFileAttributesW GetFileTime GetPrivateProfileIntW WritePrivateProfileStringW GetPrivateProfileStringW GetCurrentDirectoryW lstrlenA GlobalGetAtomNameW GetAtomNameW GetVersionExW GetShortPathNameW GetFullPathNameW GetVolumeInformationW FindFirstFileW MulDiv FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile ReadFile LoadLibraryW lstrcmpiW lstrlenW GetThreadLocale GetStringTypeExW DeleteFileW MoveFileW GetModuleFileNameW GetModuleHandleW GlobalLock GlobalUnlock SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle GetTimeZoneInformation SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP GetLocaleInfoW IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler InitializeCriticalSection GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId ExitThread CreateThread VirtualProtect GetSystemInfo VirtualQuery GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapSize Sleep GetModuleFileNameA GetStdHandle WriteFile HeapReAlloc VirtualAlloc EnterCriticalSection FatalAppExitA LeaveCriticalSection DeleteCriticalSection VirtualFree HeapCreate HeapDestroy IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentThread InterlockedDecrement SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetProcAddress RaiseException GetProcessHeap GetVersionExA GetCommandLineA GetCurrentThreadId HeapAlloc HeapFree GetLastError RtlUnwind LoadResource LockResource SizeofResource FindResourceW ExitProcess GlobalHandle

user32

LockWindowUpdate SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorW MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect IsRectEmpty CopyAcceleratorTableW CharNextW GetDialogBaseUnits DestroyIcon GetSysColorBrush WaitMessage ReleaseCapture LoadCursorW WindowFromPoint SetCapture DeleteMenu UnregisterClassW InsertMenuW RemoveMenu GetMenuStringW SystemParametersInfoW DestroyMenu GetMenuItemInfoW InflateRect ScrollWindowEx MoveWindow SetWindowTextW IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetDCEx MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect MapVirtualKeyW GetKeyNameTextW CopyRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW ShowOwnedPopups SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow PostThreadMessageW UnionRect SetParent RegisterClipboardFormatW UnpackDDElParam ReuseDDElParam LoadMenuW LoadAcceleratorsW InsertMenuItemW GetMessagePos CreatePopupMenu IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions GetFocus GetParent ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem PostMessageW PostQuitMessage LoadBitmapW CharUpperW UnhookWindowsHookEx GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW PtInRect KillTimer SetTimer GetClientRect IsIconic DrawIcon GetSystemMetrics SendMessageW GetSystemMenu AppendMenuW ShowWindow LoadIconW EnableWindow FillRect SetRect GetDC ReleaseDC LoadImageW GetScrollPos UnregisterClassA

gdi32

SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw GetViewportExtEx PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen OffsetWindowOrgEx CreateHatchBrush CreateRectRgnIndirect PatBlt GetDCOrgEx CreateFontIndirectW GetTextExtentPoint32W CopyMetaFileW CreateDCW SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsW GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthW CreateFontW SelectClipPath SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutW TextOutW RectVisible PtVisible StartDocW ExtCreatePen CreatePalette CreateRectRgn GetClipRgn SelectClipRgn SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC SetDIBColorTable GetPixel CreateDiscardableBitmap CreateSolidBrush GetPaletteEntries GetDIBColorTable BitBlt CreateCompatibleDC GetObjectW GetDIBits SelectObject CreateDIBSection GdiFlush StretchDIBits GetDeviceCaps RealizePalette SetDIBitsToDevice DeleteObject GetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteValueW RegSetValueExW RegCreateKeyExW RegSetValueW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegOpenKeyW RegCloseKey RegQueryValueExW RegCreateKeyW

shell32

ExtractIconW DragFinish DragQueryFileW SHGetFileInfoW

shlwapi

PathIsUNCW PathFindExtensionW PathRemoveExtensionW PathStripToRootW PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData CoRevokeClassObject StringFromCLSID CoTaskMemAlloc ReleaseStgMedium CreateBindCtx ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CreateStreamOnHGlobal CoTreatAsClass

oleaut32

VariantTimeToSystemTime LoadTypeLi VarBstrFromDate VarDecFromStr VarBstrFromDec VarBstrFromCy VarCyFromStr SysReAllocStringLen VarDateFromStr SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SysAllocString SafeArrayDestroy SystemTimeToVariantTime SysFreeString OleCreatePictureIndirect SysAllocStringLen VariantClear VariantChangeType SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantInit

msvfw32

DrawDibSetPalette DrawDibRealize DrawDibDraw DrawDibOpen DrawDibClose