1211b69093f4816a6da7ef9ef9b49ef9

Sharing

Copy URL Twitter E-mail

General

Target
1211b69093f4816a6da7ef9ef9b49ef9
Size 800KB
Sample220317-pex98sded5
SHA256 161d70d2333afa751ffcc70a9b9e63e5eb56a249fb4cedddcfb979d29c2c9b80
MD5 1211b69093f4816a6da7ef9ef9b49ef9
SHA1 71a6474ef48b0f7d7c5fae89eec4444462fbb390
SHA512 aff48bceaeab978c93d2ff80185c2b8b362efc56ab14344ae69d27ebb4dfba3e0b17b7577d8fee4ea08741f15937520990dec5afa289fdd5ca849ea6e7833099
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

1211b69093f4816a6da7ef9ef9b49ef9

.dll 800KB

1211b69093f4816a6da7ef9ef9b49ef9

IMPHASH cb131077fd443ccf418450d8ed763df9
SHA256 161d70d2333afa751ffcc70a9b9e63e5eb56a249fb4cedddcfb979d29c2c9b80
MD5 1211b69093f4816a6da7ef9ef9b49ef9
SHA1 71a6474ef48b0f7d7c5fae89eec4444462fbb390
SHA512 aff48bceaeab978c93d2ff80185c2b8b362efc56ab14344ae69d27ebb4dfba3e0b17b7577d8fee4ea08741f15937520990dec5afa289fdd5ca849ea6e7833099
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

130668

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCommandLineA GetProcessHeap RaiseException RtlUnwind HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree GetStdHandle GetACP Sleep GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo FileTimeToSystemTime GetThreadLocale GlobalFlags InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError LockResource SizeofResource LoadResource FindResourceA ExitProcess lstrcpyA WinExec LoadLibraryA lstrcatA GetWindowsDirectoryA FreeLibrary GetVersion CompareStringA GetLastError InterlockedExchange MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA SetHandleCount

user32

IsRectEmpty SetRect InvalidateRgn GetNextDlgGroupItem UnregisterClassA RegisterClipboardFormatA PostThreadMessageA TranslateMessage GetActiveWindow ValidateRect SetWindowContextHelpId MapDialogRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GetWindowThreadProcessId GetCursorPos WindowFromPoint IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow CopyAcceleratorTableA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow CopyRect SetMenuItemBitmaps GetMenuCheckMarkDimensions CharUpperA EnableWindow SendMessageA LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetSystemMenu IsIconic CharNextA DestroyMenu GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog DispatchMessageA GetMessageA LoadCursorA ReleaseCapture IsWindow GetSysColor ReleaseDC InvalidateRect CopyIcon InflateRect GetDC PtInRect GetClientRect MessageBeep GetParent SetCapture GetWindowRect SetCursor PostMessageA GetSysColorBrush TabbedTextOutA RedrawWindow DrawStateA ChildWindowFromPoint DrawTextExA GrayStringA GetFocus DrawTextA ScreenToClient SetWindowRgn GetSystemMetrics CreateWindowExW AppendMenuA ShowWindow DrawIcon LoadIconA GetPropA

gdi32

GetWindowExtEx SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetViewportExtEx GetMapMode GetBkColor GetTextColor GetRgnBox GetStockObject SetMapMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap GetDeviceCaps BitBlt DeleteObject CreateCompatibleDC CreateCompatibleBitmap Ellipse PtVisible FillRgn SetPixelV Escape RectVisible CreateEllipticRgnIndirect ExtTextOutA CreateSolidBrush TextOutA GetTextExtentPoint32A CreateFontIndirectA GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegOpenKeyA RegCloseKey RegQueryValueA RegOpenKeyExA

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysFreeString SysAllocStringByteLen VariantClear VariantChangeType VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString SysStringLen