ff81cdc86b7c12c33ed8c106fb0c0b48

Sharing

Copy URL Twitter E-mail

General

Target
ff81cdc86b7c12c33ed8c106fb0c0b48
Size 996KB
Sample220315-rn1stscfd2
SHA256 ad9f5e3ac5323892bb626eed057e2d41b652be8a1c89bea111e64aff8dae5040
MD5 ff81cdc86b7c12c33ed8c106fb0c0b48
SHA1 9ccfcb9a85cc9771b4696cfc1de4b954ab7fcecc
SHA512 c5127f792a8dceec8a572c9d0605aad829caaae05690c47c53f2a63f914743a69d711091f80bdba112bf005c34759426a5f4d4c501b59d430bee71dca021ecec
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

ff81cdc86b7c12c33ed8c106fb0c0b48

.dll 996KB

ff81cdc86b7c12c33ed8c106fb0c0b48

IMPHASH d912f984e2094116df83ddb751c9d2cc
SHA256 ad9f5e3ac5323892bb626eed057e2d41b652be8a1c89bea111e64aff8dae5040
MD5 ff81cdc86b7c12c33ed8c106fb0c0b48
SHA1 9ccfcb9a85cc9771b4696cfc1de4b954ab7fcecc
SHA512 c5127f792a8dceec8a572c9d0605aad829caaae05690c47c53f2a63f914743a69d711091f80bdba112bf005c34759426a5f4d4c501b59d430bee71dca021ecec
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

120398

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom GlobalAlloc lstrcmpW lstrcmpA EnumResourceLanguagesW GetVersion ConvertDefaultLocale SetThreadPriority ResumeThread WaitForSingleObject SetEvent SuspendThread CreateEventW GlobalAddAtomW FreeResource GlobalFree GlobalFindAtomW LocalFree FormatMessageW GlobalSize CopyFileW GlobalFlags LocalAlloc GlobalReAlloc CreateFileW LocalReAlloc SetErrorMode FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetFileTime SetFileAttributesW GetFileAttributesW GetFileTime GetPrivateProfileIntW WritePrivateProfileStringW GetPrivateProfileStringW GetCurrentDirectoryW lstrlenA GlobalGetAtomNameW GetAtomNameW GetVersionExW GetShortPathNameW GetFullPathNameW GetVolumeInformationW FindFirstFileW MulDiv FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile ReadFile LoadLibraryW lstrcmpiW lstrlenW GetThreadLocale GetStringTypeExW DeleteFileW MoveFileW GetModuleFileNameW GetModuleHandleW GlobalLock GlobalUnlock SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle GetTimeZoneInformation SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP GetLocaleInfoW IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler InitializeCriticalSection GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId ExitThread CreateThread VirtualProtect GetSystemInfo VirtualQuery GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapSize Sleep GetModuleFileNameA GetStdHandle WriteFile HeapReAlloc VirtualAlloc EnterCriticalSection FatalAppExitA LeaveCriticalSection DeleteCriticalSection VirtualFree HeapCreate HeapDestroy IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentThread InterlockedDecrement SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetProcAddress RaiseException GetProcessHeap GetVersionExA GetCommandLineA GetCurrentThreadId HeapAlloc HeapFree GetLastError RtlUnwind LoadResource LockResource SizeofResource FindResourceW ExitProcess GlobalHandle

user32

LockWindowUpdate SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorW MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect IsRectEmpty CopyAcceleratorTableW CharNextW GetDialogBaseUnits DestroyIcon GetSysColorBrush WaitMessage ReleaseCapture LoadCursorW WindowFromPoint SetCapture DeleteMenu UnregisterClassW InsertMenuW RemoveMenu GetMenuStringW SystemParametersInfoW DestroyMenu GetMenuItemInfoW InflateRect ScrollWindowEx MoveWindow SetWindowTextW IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetDCEx MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect MapVirtualKeyW GetKeyNameTextW CopyRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW ShowOwnedPopups SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow PostThreadMessageW UnionRect SetParent RegisterClipboardFormatW UnpackDDElParam ReuseDDElParam LoadMenuW LoadAcceleratorsW InsertMenuItemW GetMessagePos CreatePopupMenu IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions GetFocus GetParent ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem PostMessageW PostQuitMessage LoadBitmapW CharUpperW UnhookWindowsHookEx GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW PtInRect KillTimer SetTimer GetClientRect IsIconic DrawIcon GetSystemMetrics SendMessageW GetSystemMenu AppendMenuW ShowWindow LoadIconW EnableWindow FillRect SetRect GetDC ReleaseDC LoadImageW GetScrollPos UnregisterClassA

gdi32

SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw GetViewportExtEx PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateBitmap GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen OffsetWindowOrgEx CreateHatchBrush CreateRectRgnIndirect PatBlt GetDCOrgEx CreateFontIndirectW GetTextExtentPoint32W CopyMetaFileW CreateDCW SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsW GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthW CreateFontW SelectClipPath SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutW TextOutW RectVisible PtVisible StartDocW ExtCreatePen CreatePalette CreateRectRgn GetClipRgn SelectClipRgn SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC SetDIBColorTable GetPixel CreateDiscardableBitmap CreateSolidBrush GetPaletteEntries GetDIBColorTable BitBlt CreateCompatibleDC GetObjectW GetDIBits SelectObject CreateDIBSection GdiFlush StretchDIBits GetDeviceCaps RealizePalette SetDIBitsToDevice DeleteObject GetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegDeleteValueW RegSetValueExW RegCreateKeyExW RegSetValueW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegOpenKeyW RegCloseKey RegQueryValueExW RegCreateKeyW

shell32

ExtractIconW DragFinish DragQueryFileW SHGetFileInfoW

shlwapi

PathIsUNCW PathFindExtensionW PathRemoveExtensionW PathStripToRootW PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject OleDuplicateData CoRevokeClassObject StringFromCLSID CoTaskMemAlloc ReleaseStgMedium CreateBindCtx ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CreateStreamOnHGlobal CoTreatAsClass

oleaut32

VariantTimeToSystemTime LoadTypeLi VarBstrFromDate VarDecFromStr VarBstrFromDec VarBstrFromCy VarCyFromStr SysReAllocStringLen VarDateFromStr SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SysAllocString SafeArrayDestroy SystemTimeToVariantTime SysFreeString OleCreatePictureIndirect SysAllocStringLen VariantClear VariantChangeType SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect VariantInit

msvfw32

DrawDibSetPalette DrawDibRealize DrawDibDraw DrawDibOpen DrawDibClose