4e18bcb28ffa2620b0030cfcb2f23ee4

Sharing

Copy URL Twitter E-mail

General

Target
4e18bcb28ffa2620b0030cfcb2f23ee4
Size 780KB
Sample220321-sn2kssdcb5
SHA256 342fbbda8e71c4cabbff0b1aed747c726983651bdec718b115c8771acd4c09a3
MD5 4e18bcb28ffa2620b0030cfcb2f23ee4
SHA1 0eefb63d0706e927e4d47acf61a032422b0b361f
SHA512 9402e69fbf732678c94fd3242c57be09752a0144200551cdd24f839ba215ab49f9e7397df9a5a23c5efe440d8c074679c1c1c489e00b2b47cbfa07efd78d78ff
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

4e18bcb28ffa2620b0030cfcb2f23ee4

.dll 780KB

4e18bcb28ffa2620b0030cfcb2f23ee4

IMPHASH 973d97b59b04de30192c4429f01c1ab1
SHA256 342fbbda8e71c4cabbff0b1aed747c726983651bdec718b115c8771acd4c09a3
MD5 4e18bcb28ffa2620b0030cfcb2f23ee4
SHA1 0eefb63d0706e927e4d47acf61a032422b0b361f
SHA512 9402e69fbf732678c94fd3242c57be09752a0144200551cdd24f839ba215ab49f9e7397df9a5a23c5efe440d8c074679c1c1c489e00b2b47cbfa07efd78d78ff
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

317739

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapFree HeapReAlloc GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep SetHandleCount GetFileType GetStartupInfoA GetFileTime GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetModuleFileNameW CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GetCurrentProcessId GetProcAddress GetModuleHandleA LoadLibraryA GlobalGetAtomNameA GlobalAddAtomA SetLastError GlobalFree CopyFileA GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW WideCharToMultiByte lstrlenW CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar InterlockedExchange GetVersion FreeEnvironmentStringsA GetEnvironmentVariableW

user32

MapVirtualKeyA IsRectEmpty DeleteMenu GetSystemMenu SetParent UnionRect DestroyIcon UnregisterClassA WindowFromPoint GetDCEx LockWindowUpdate SetCapture EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDialogBaseUnits ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar MessageBoxA CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetKeyNameTextA CallWindowProcA GetWindowPlacement RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA WinHelpA GetWindowThreadProcessId GetActiveWindow EqualRect GetKeyState GetMenu LoadIconA PeekMessageA GetCapture ReleaseCapture LoadAcceleratorsA SetActiveWindow IsWindowVisible IsIconic InsertMenuItemA CreatePopupMenu GetClassInfoA IntersectRect SetRectEmpty GetLastActivePopup BringWindowToTop PostMessageA SetMenu GetDesktopWindow TranslateAcceleratorA GetWindowTextLengthA GetWindowTextA GetFocus SetWindowPos ScrollWindowEx SetFocus IsWindowEnabled ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID IsWindow SetWindowTextA CharLowerW CharLowerA CharUpperW CharUpperA UpdateWindow EnableWindow GetWindowLongA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt SendDlgItemMessageA GetDlgItemTextA GetDlgItemInt GetDlgItem CheckRadioButton CheckDlgButton GetWindow GetMenuState GetMenuItemInfoA GetSysColorBrush ShowOwnedPopups GetMessageA TranslateMessage ValidateRect PostQuitMessage EndPaint BeginPaint DefWindowProcA GetWindowDC SendMessageA GetMessagePos PtInRect GetWindowRect LoadImageA GetSysColor GetSystemMetrics CopyRect InflateRect DrawEdge DrawFrameControl DrawFocusRect SetRect GetParent GetClientRect OffsetRect SetTimer SetCursor GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu LoadCursorA KillTimer InvalidateRect ReleaseDC GetDC GetCursorPos SystemParametersInfoA

gdi32

StartDocA PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC GetPixel CreatePatternBrush SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP GetTextExtentPoint32A GetCharWidthA StretchDIBits GetBkColor GetTextMetricsA BitBlt SetTextCharacterExtra GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection CreateDIBPatternBrushPt CreateFontA SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateBitmap SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateCompatibleBitmap CreateDCA CopyMetaFileA GetDeviceCaps SelectObject RoundRect GetTextColor GetBkMode CreateFontIndirectA CreateSolidBrush GetStockObject StretchBlt Polygon CreateCompatibleDC GetObjectA SetMapperFlags

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg CoTaskMemAlloc OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString ReadFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate