644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e

General

Target
644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e
Size 511KB
Sample220322-p2x8rafba7
SHA256 644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e
MD5 7531aa8c3508046d1f17de8087915332
SHA1 957b8cd7babadf9d5104fb11e7508def071e08a9
SHA512 d8c23a425d807c78304b2192c845d81d89dcf7981871d660bb824ce7a7591101166d22bf5a71253800ba074e83a347a56f9458881a4dbd7e3659f48be2930dcd
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e

.dll 511KB

644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e

IMPHASH 9e45408bef939ba7b084556548e54b63
SHA256 644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e
MD5 7531aa8c3508046d1f17de8087915332
SHA1 957b8cd7babadf9d5104fb11e7508def071e08a9
SHA512 d8c23a425d807c78304b2192c845d81d89dcf7981871d660bb824ce7a7591101166d22bf5a71253800ba074e83a347a56f9458881a4dbd7e3659f48be2930dcd
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

50585

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

imm32

ImmGetProperty ImmGetCandidateListA ImmGetCandidateListW ImmSetConversionStatus ImmGetCompositionFontW ImmConfigureIMEW ImmEscapeW ImmSetCompositionWindow ImmEnumRegisterWordW ImmDisableIME

usp10

ScriptSubstituteSingleGlyph ScriptGetFontAlternateGlyphs ScriptPlaceOpenType ScriptRecordDigitSubstitution ScriptStringGetLogicalWidths ScriptStringFree ScriptGetCMap ScriptPlace

kernel32

DecodePointer WriteConsoleW CloseHandle CreateFileW SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle GetFileType LCMapStringW GetProcessHeap GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode

Sharing

General

Malware Config

Signatures

File Explorer

644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e

imm32

usp10

kernel32