850f79fe498234213df702c3e64aad5c

Sharing

Copy URL Twitter E-mail

General

Target
850f79fe498234213df702c3e64aad5c
Size 800KB
Sample220317-pex98sded3
SHA256 0be944526f8d04a30c4e833b8aa4c1beba68bcdc4a1b5b40ec28e8b985191246
MD5 850f79fe498234213df702c3e64aad5c
SHA1 a52b00019bfc1ea771e754adc1134cd34db36959
SHA512 530032b93a6c0bac67915f97c93b183b6ee1ec4a5bed401cb44a7bbd1b65bda06229b133fac88041f1b3b62b6d577e15de8fcc6fbbded2e87e71b06fc522282f
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

850f79fe498234213df702c3e64aad5c

.dll 800KB

850f79fe498234213df702c3e64aad5c

IMPHASH cb131077fd443ccf418450d8ed763df9
SHA256 0be944526f8d04a30c4e833b8aa4c1beba68bcdc4a1b5b40ec28e8b985191246
MD5 850f79fe498234213df702c3e64aad5c
SHA1 a52b00019bfc1ea771e754adc1134cd34db36959
SHA512 530032b93a6c0bac67915f97c93b183b6ee1ec4a5bed401cb44a7bbd1b65bda06229b133fac88041f1b3b62b6d577e15de8fcc6fbbded2e87e71b06fc522282f
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

130668

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCommandLineA GetProcessHeap RaiseException RtlUnwind HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree GetStdHandle GetACP Sleep GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo FileTimeToSystemTime GetThreadLocale GlobalFlags InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError LockResource SizeofResource LoadResource FindResourceA ExitProcess lstrcpyA WinExec LoadLibraryA lstrcatA GetWindowsDirectoryA FreeLibrary GetVersion CompareStringA GetLastError InterlockedExchange MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA SetHandleCount

user32

IsRectEmpty SetRect InvalidateRgn GetNextDlgGroupItem UnregisterClassA RegisterClipboardFormatA PostThreadMessageA TranslateMessage GetActiveWindow ValidateRect SetWindowContextHelpId MapDialogRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GetWindowThreadProcessId GetCursorPos WindowFromPoint IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow CopyAcceleratorTableA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow CopyRect SetMenuItemBitmaps GetMenuCheckMarkDimensions CharUpperA EnableWindow SendMessageA LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMenu IsIconic CharNextA DestroyMenu GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog DispatchMessageA GetMessageA LoadCursorA ReleaseCapture IsWindow GetSysColor ReleaseDC InvalidateRect CopyIcon InflateRect GetDC PtInRect GetClientRect MessageBeep GetParent SetCapture GetWindowRect SetCursor PostMessageA GetSysColorBrush TabbedTextOutA RedrawWindow DrawStateA ChildWindowFromPoint DrawTextExA GrayStringA GetFocus DrawTextA ScreenToClient SetWindowRgn GetSystemMetrics CreateWindowExW AppendMenuA ShowWindow DrawIcon LoadIconA GetPropA

gdi32

GetWindowExtEx SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetViewportExtEx GetMapMode GetBkColor GetTextColor GetRgnBox GetStockObject SetMapMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap GetDeviceCaps BitBlt DeleteObject CreateCompatibleDC CreateCompatibleBitmap Ellipse PtVisible FillRgn SetPixelV Escape RectVisible CreateEllipticRgnIndirect ExtTextOutA CreateSolidBrush TextOutA GetTextExtentPoint32A CreateFontIndirectA GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegOpenKeyA RegCloseKey RegQueryValueA RegOpenKeyExA

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysFreeString SysAllocStringByteLen VariantClear VariantChangeType VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString SysStringLen