d6a6eb2002ad6e3a0140afb33aee4efb99bdb91e7d89fe8b96b7e15f813fad94

Sharing

Copy URL Twitter E-mail

General

Target
d6a6eb2002ad6e3a0140afb33aee4efb99bdb91e7d89fe8b96b7e15f813fad94
Size 1012KB
Sample220322-p9erdabedl
SHA256 d6a6eb2002ad6e3a0140afb33aee4efb99bdb91e7d89fe8b96b7e15f813fad94
MD5 85b1893d67332a7443c70bcc3e6b85ec
SHA1 c9d24f246d25d8d094f55e88388874bc9054d158
SHA512 a0ef2d339d106942c7cabbc1a5ef7368ba07187857f1dec729bf2a7bb3f899b629df6fae41752699f6a4112bc0a6813b24cbfb5b26edcb90ea9f3f20307c7c22
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

d6a6eb2002ad6e3a0140afb33aee4efb99bdb91e7d89fe8b96b7e15f813fad94

.dll 1012KB

d6a6eb2002ad6e3a0140afb33aee4efb99bdb91e7d89fe8b96b7e15f813fad94

IMPHASH 343c64a0a6670fd2787b781591a42e0e
SHA256 d6a6eb2002ad6e3a0140afb33aee4efb99bdb91e7d89fe8b96b7e15f813fad94
MD5 85b1893d67332a7443c70bcc3e6b85ec
SHA1 c9d24f246d25d8d094f55e88388874bc9054d158
SHA512 a0ef2d339d106942c7cabbc1a5ef7368ba07187857f1dec729bf2a7bb3f899b629df6fae41752699f6a4112bc0a6813b24cbfb5b26edcb90ea9f3f20307c7c22
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

298903

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount HeapAlloc HeapFree RtlUnwind HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep SetHandleCount GetFileType GetFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GetCurrentProcessId CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA LoadLibraryA GetModuleHandleA GetProcAddress GlobalFree CopyFileA GlobalSize FormatMessageA LocalFree MulDiv SetLastError GlobalAlloc GlobalLock GlobalUnlock ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetStartupInfoA InterlockedExchange

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA SetParent UnionRect PostThreadMessageA SetTimer KillTimer GetDCEx LockWindowUpdate MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId ShowOwnedPopups SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow SetRect BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible UpdateWindow GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA SendMessageA EnableWindow CharLowerA CharLowerW CharUpperA CharUpperW EnableMenuItem CheckMenuItem MapVirtualKeyA GetKeyNameTextA CopyRect IsWindow EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient IsRectEmpty CopyAcceleratorTableA CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu LoadCursorA GetSysColorBrush DestroyMenu GetMenuItemInfoA DispatchMessageA SetWindowContextHelpId DrawIcon AppendMenuA PostMessageA GetSystemMenu IsIconic GetClientRect MapWindowPoints InvalidateRect LoadIconA GetSystemMetrics CloseClipboard SetClipboardData EmptyClipboard OpenClipboard PtInRect InflateRect OffsetRect FrameRect SetCapture GetParent GetSysColor ReleaseCapture RemoveMenu GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID GetMenuStringA GetMenuState FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetClassLongA

gdi32

SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ScaleViewportExtEx ExtCreatePen CreateHatchBrush CreateRectRgnIndirect PatBlt GetDCOrgEx CreateFontIndirectA GetTextExtentPoint32A SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthA CreateFontA StretchDIBits SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel CreatePen GetStockObject GetWindowExtEx GetViewportExtEx GetObjectA SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC CreateDCA CopyMetaFileA GetDeviceCaps Ellipse SetBrushOrgEx CreateBitmap CreateBrushIndirect CreateSolidBrush BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

ExtractIconA DragFinish DragQueryFileA SHGetFileInfoA

shlwapi

PathFindExtensionA ColorHLSToRGB PathRemoveExtensionA PathFindFileNameA PathStripToRootA ColorRGBToHLS ColorAdjustLuma PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject StringFromGUID2 CoCreateInstance CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate OleCreateFontIndirect SysAllocString LoadTypeLi VariantClear

Name

.text

Size

600KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

200KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ