163436cdaecafa20a83804d8d09ae08b

Sharing

Copy URL Twitter E-mail

General

Target
163436cdaecafa20a83804d8d09ae08b
Size 780KB
Sample220321-k7xf7aagh3
SHA256 7cd6876c5556bb6fb7cbf6ecb7c17fe4e8f1924d05695f06f4c71f4e64e778a7
MD5 163436cdaecafa20a83804d8d09ae08b
SHA1 64b7db96aa14118afefee5eee5f46b4ad5f7e592
SHA512 37a660cea0e827bb7fcd801ebfcddd31d5821207458511f4e11e4fd37f5dfb7a10f3955bbcf9f4f37287296d877589c0872f74e4fa927bc586e521dd0cd56fcc
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

163436cdaecafa20a83804d8d09ae08b

.dll 780KB

163436cdaecafa20a83804d8d09ae08b

IMPHASH 973d97b59b04de30192c4429f01c1ab1
SHA256 7cd6876c5556bb6fb7cbf6ecb7c17fe4e8f1924d05695f06f4c71f4e64e778a7
MD5 163436cdaecafa20a83804d8d09ae08b
SHA1 64b7db96aa14118afefee5eee5f46b4ad5f7e592
SHA512 37a660cea0e827bb7fcd801ebfcddd31d5821207458511f4e11e4fd37f5dfb7a10f3955bbcf9f4f37287296d877589c0872f74e4fa927bc586e521dd0cd56fcc
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

317739

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapFree HeapReAlloc GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep SetHandleCount GetFileType GetStartupInfoA GetFileTime GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetModuleFileNameW CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GetCurrentProcessId GetProcAddress GetModuleHandleA LoadLibraryA GlobalGetAtomNameA GlobalAddAtomA SetLastError GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW WideCharToMultiByte lstrlenW CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar InterlockedExchange GetVersion FreeEnvironmentStringsA GetEnvironmentVariableW

user32

MapVirtualKeyA IsRectEmpty DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon UnregisterClassA WindowFromPoint GetDCEx LockWindowUpdate SetCapture EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDialogBaseUnits ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar MessageBoxA CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetKeyNameTextA CallWindowProcA GetWindowPlacement RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA WinHelpA GetWindowThreadProcessId GetActiveWindow EqualRect GetKeyState GetMenu LoadIconA PeekMessageA GetCapture ReleaseCapture LoadAcceleratorsA SetActiveWindow IsWindowVisible IsIconic InsertMenuItemA CreatePopupMenu GetClassInfoA IntersectRect SetRectEmpty GetLastActivePopup BringWindowToTop PostMessageA SetMenu GetDesktopWindow TranslateAcceleratorA GetWindowTextLengthA GetWindowTextA GetFocus SetWindowPos ScrollWindowEx SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID IsWindow SetWindowTextA CharLowerW CharLowerA CharUpperW CharUpperA UpdateWindow EnableWindow GetWindowLongA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt SendDlgItemMessageA GetDlgItemTextA GetDlgItemInt GetDlgItem CheckRadioButton CheckDlgButton GetWindow GetMenuState GetMenuItemInfoA GetSysColorBrush ShowOwnedPopups GetMessageA TranslateMessage ValidateRect PostQuitMessage EndPaint BeginPaint DefWindowProcA GetWindowDC SendMessageA GetMessagePos PtInRect GetWindowRect LoadImageA GetSysColor GetSystemMetrics CopyRect InflateRect DrawEdge DrawFrameControl DrawFocusRect SetRect GetParent GetClientRect OffsetRect SetTimer SetCursor GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu LoadCursorA KillTimer InvalidateRect ReleaseDC GetDC GetCursorPos SystemParametersInfoA

gdi32

StartDocA PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC GetPixel CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextExtentPoint32A GetCharWidthA StretchDIBits GetBkColor GetTextMetricsA BitBlt SetTextCharacterExtra GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection CreateDIBPatternBrushPt CreateFontA SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateBitmap SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateCompatibleBitmap CreateDCA CopyMetaFileA GetDeviceCaps SelectObject RoundRect GetTextColor GetBkMode CreateFontIndirectA CreateSolidBrush GetStockObject StretchBlt Polygon CreateCompatibleDC GetObjectA SetMapperFlags

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg CoTaskMemAlloc OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString ReadFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate