ab44edd8515ee8245e36ecb95ed6985e

Sharing

Copy URL Twitter E-mail

General

Target
ab44edd8515ee8245e36ecb95ed6985e
Size 480KB
Sample220320-2ntdvsgfgr
SHA256 987707d1948d66108181198f36c9df673d04bb2cdff561c11ff60e31b178f263
MD5 ab44edd8515ee8245e36ecb95ed6985e
SHA1 cf9b1f4d3e2c0b0139c67dd313cba3871894cdfc
SHA512 441acd9ee3fd59cecb4e7e86df7c20b5956224e9203700b348a5a9d5f2549f8f9b8bbc49ed5e3254383e6774e15c96e4851d7268a9dbc1cd6980fbc9ad6786ce
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

ab44edd8515ee8245e36ecb95ed6985e

.dll 480KB

ab44edd8515ee8245e36ecb95ed6985e

IMPHASH 3881d76bffe56c7cefb6ec7d56cb4aac
SHA256 987707d1948d66108181198f36c9df673d04bb2cdff561c11ff60e31b178f263
MD5 ab44edd8515ee8245e36ecb95ed6985e
SHA1 cf9b1f4d3e2c0b0139c67dd313cba3871894cdfc
SHA512 441acd9ee3fd59cecb4e7e86df7c20b5956224e9203700b348a5a9d5f2549f8f9b8bbc49ed5e3254383e6774e15c96e4851d7268a9dbc1cd6980fbc9ad6786ce
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

164944

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind VirtualAlloc HeapAlloc HeapFree HeapReAlloc GetCommandLineA GetProcessHeap RaiseException HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep GetACP GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetOEMCP GetCPInfo CreateFileA GetCurrentProcess GetThreadLocale FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA lstrcmpA FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA WideCharToMultiByte CompareStringA MultiByteToWideChar InterlockedExchange GetVersion SetHandleCount

user32

LoadCursorA GetSysColorBrush EndPaint BeginPaint ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA RegisterWindowMessageA WinHelpA GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu CreateWindowExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx CopyRect PtInRect DefWindowProcA CallWindowProcA GetWindowPlacement GetWindowRect GetWindowTextLengthA GetWindowTextA SetWindowPos SetFocus ShowWindow SetWindowLongA GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetWindow GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA UnregisterClassA DestroyMenu GetClassInfoExA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetClientRect IsIconic DrawIcon GetSystemMetrics SendMessageA LoadIconA EnableWindow SystemParametersInfoA

gdi32

SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetDeviceCaps DeleteObject SetMapMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shlwapi

PathFindExtensionA

oleaut32

VariantClear VariantChangeType VariantInit

ws2_32

inet_ntoa inet_addr