543176db3e2a3e0a20282118eb4ca877

Sharing

Copy URL Twitter E-mail

General

Target
543176db3e2a3e0a20282118eb4ca877
Size 780KB
Sample220321-kl179aaghp
SHA256 8dd42bae44b81a33bfe39deccb2fb33faef0d350feb33f826117dedbf1605d5b
MD5 543176db3e2a3e0a20282118eb4ca877
SHA1 70f56791a6749f3f48427bd0f2c9ffb334e61e7d
SHA512 399669288b5b09de8d5cc44d15aa972595f7a276f99d94270bc545fe731c16eff93a83792369a77ce5d83a3add2b220e35d5ebb284be91177807926ea01d0f49
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

543176db3e2a3e0a20282118eb4ca877

.dll 780KB

543176db3e2a3e0a20282118eb4ca877

IMPHASH 973d97b59b04de30192c4429f01c1ab1
SHA256 8dd42bae44b81a33bfe39deccb2fb33faef0d350feb33f826117dedbf1605d5b
MD5 543176db3e2a3e0a20282118eb4ca877
SHA1 70f56791a6749f3f48427bd0f2c9ffb334e61e7d
SHA512 399669288b5b09de8d5cc44d15aa972595f7a276f99d94270bc545fe731c16eff93a83792369a77ce5d83a3add2b220e35d5ebb284be91177807926ea01d0f49
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

317739

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapFree HeapReAlloc GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep SetHandleCount GetFileType GetStartupInfoA GetFileTime GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetModuleFileNameW CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GetCurrentProcessId GetProcAddress GetModuleHandleA LoadLibraryA GlobalGetAtomNameA GlobalAddAtomA SetLastError GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW WideCharToMultiByte lstrlenW CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar InterlockedExchange GetVersion FreeEnvironmentStringsA GetEnvironmentVariableW

user32

MapVirtualKeyA IsRectEmpty DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon UnregisterClassA WindowFromPoint GetDCEx LockWindowUpdate SetCapture EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDialogBaseUnits ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar MessageBoxA CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetKeyNameTextA CallWindowProcA GetWindowPlacement RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA WinHelpA GetWindowThreadProcessId GetActiveWindow EqualRect GetKeyState GetMenu LoadIconA PeekMessageA GetCapture ReleaseCapture LoadAcceleratorsA SetActiveWindow IsWindowVisible IsIconic InsertMenuItemA CreatePopupMenu GetClassInfoA IntersectRect SetRectEmpty GetLastActivePopup BringWindowToTop PostMessageA SetMenu GetDesktopWindow TranslateAcceleratorA GetWindowTextLengthA GetWindowTextA GetFocus SetWindowPos ScrollWindowEx SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID IsWindow SetWindowTextA CharLowerW CharLowerA CharUpperW CharUpperA UpdateWindow EnableWindow GetWindowLongA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt SendDlgItemMessageA GetDlgItemTextA GetDlgItemInt GetDlgItem CheckRadioButton CheckDlgButton GetWindow GetMenuState GetMenuItemInfoA GetSysColorBrush ShowOwnedPopups GetMessageA TranslateMessage ValidateRect PostQuitMessage EndPaint BeginPaint DefWindowProcA GetWindowDC SendMessageA GetMessagePos PtInRect GetWindowRect LoadImageA GetSysColor GetSystemMetrics CopyRect InflateRect DrawEdge DrawFrameControl DrawFocusRect SetRect GetParent GetClientRect OffsetRect SetTimer SetCursor GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu LoadCursorA KillTimer InvalidateRect ReleaseDC GetDC GetCursorPos SystemParametersInfoA

gdi32

StartDocA PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC GetPixel CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextExtentPoint32A GetCharWidthA StretchDIBits GetBkColor GetTextMetricsA BitBlt SetTextCharacterExtra GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection CreateDIBPatternBrushPt CreateFontA SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateBitmap SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateCompatibleBitmap CreateDCA CopyMetaFileA GetDeviceCaps SelectObject RoundRect GetTextColor GetBkMode CreateFontIndirectA CreateSolidBrush GetStockObject StretchBlt Polygon CreateCompatibleDC GetObjectA SetMapperFlags

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg CoTaskMemAlloc OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString ReadFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate