0ffb0a3ec5392f630e0ba3de7dc88f56

Sharing

Copy URL Twitter E-mail

General

Target
0ffb0a3ec5392f630e0ba3de7dc88f56
Size 764KB
Sample220321-n9rkhacaa9
SHA256 3eaea03b998a45260526e620d94670eae996ff5b51ff35b4ca4b1b4dc080db0f
MD5 0ffb0a3ec5392f630e0ba3de7dc88f56
SHA1 a222712f9e7aa88d68126f74525561a9caf58362
SHA512 56f7c912140ac8ef550b9b27d2d2ed8d3d4bcf0ace7d55da5c7a2bcf2cbc14af819a58ecab7d9111349df61090399360461f594919ea002942da70f1f6f42792
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

0ffb0a3ec5392f630e0ba3de7dc88f56

.dll 764KB

0ffb0a3ec5392f630e0ba3de7dc88f56

IMPHASH 973d97b59b04de30192c4429f01c1ab1
SHA256 3eaea03b998a45260526e620d94670eae996ff5b51ff35b4ca4b1b4dc080db0f
MD5 0ffb0a3ec5392f630e0ba3de7dc88f56
SHA1 a222712f9e7aa88d68126f74525561a9caf58362
SHA512 56f7c912140ac8ef550b9b27d2d2ed8d3d4bcf0ace7d55da5c7a2bcf2cbc14af819a58ecab7d9111349df61090399360461f594919ea002942da70f1f6f42792
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

303787

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapFree HeapReAlloc GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep SetHandleCount GetFileType GetStartupInfoA GetFileTime GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetModuleFileNameW CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GetCurrentProcessId GetProcAddress GetModuleHandleA LoadLibraryA GlobalGetAtomNameA GlobalAddAtomA SetLastError GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW WideCharToMultiByte lstrlenW CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar InterlockedExchange GetVersion FreeEnvironmentStringsA GetEnvironmentVariableW

user32

MapVirtualKeyA IsRectEmpty DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon UnregisterClassA WindowFromPoint GetDCEx LockWindowUpdate SetCapture EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDialogBaseUnits ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar MessageBoxA CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetKeyNameTextA CallWindowProcA GetWindowPlacement RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA WinHelpA GetWindowThreadProcessId GetActiveWindow EqualRect GetKeyState GetMenu LoadIconA PeekMessageA GetCapture ReleaseCapture LoadAcceleratorsA SetActiveWindow IsWindowVisible IsIconic InsertMenuItemA CreatePopupMenu GetClassInfoA IntersectRect SetRectEmpty GetLastActivePopup BringWindowToTop PostMessageA SetMenu GetDesktopWindow TranslateAcceleratorA GetWindowTextLengthA GetWindowTextA GetFocus SetWindowPos ScrollWindowEx SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID IsWindow SetWindowTextA CharLowerW CharLowerA CharUpperW CharUpperA UpdateWindow EnableWindow GetWindowLongA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt SendDlgItemMessageA GetDlgItemTextA GetDlgItemInt GetDlgItem CheckRadioButton CheckDlgButton GetWindow GetMenuState GetMenuItemInfoA GetSysColorBrush ShowOwnedPopups GetMessageA TranslateMessage ValidateRect PostQuitMessage EndPaint BeginPaint DefWindowProcA GetWindowDC SendMessageA GetMessagePos PtInRect GetWindowRect LoadImageA GetSysColor GetSystemMetrics CopyRect InflateRect DrawEdge DrawFrameControl DrawFocusRect SetRect GetParent GetClientRect OffsetRect SetTimer SetCursor GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu LoadCursorA KillTimer InvalidateRect ReleaseDC GetDC GetCursorPos SystemParametersInfoA

gdi32

StartDocA PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC GetPixel CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextExtentPoint32A GetCharWidthA StretchDIBits GetBkColor GetTextMetricsA BitBlt SetTextCharacterExtra GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection CreateDIBPatternBrushPt CreateFontA SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateBitmap SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateCompatibleBitmap CreateDCA CopyMetaFileA GetDeviceCaps SelectObject RoundRect GetTextColor GetBkMode CreateFontIndirectA CreateSolidBrush GetStockObject StretchBlt Polygon CreateCompatibleDC GetObjectA SetMapperFlags

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg CoTaskMemAlloc OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString ReadFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate