dab4fd0a7e93d460f8961902e12e2734dc089586db0e3b52609375ef951da732

Sharing

Copy URL Twitter E-mail

General

Target
dab4fd0a7e93d460f8961902e12e2734dc089586db0e3b52609375ef951da732
Size 1012KB
Sample220322-p9erdabedm
SHA256 dab4fd0a7e93d460f8961902e12e2734dc089586db0e3b52609375ef951da732
MD5 05845db62454ae7137263934fb832d2b
SHA1 2f006ace932c74c4a3de3b44b12b44f46a1462ee
SHA512 518a72e8ac5c497e805d4f34abd8ba7e7c3aa1bb97982a65bf53d3ac2f05f31f096d37cf2adcc82e0ae4c8d8880ce9ba5a93b38577172296f4710a7398291f88
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

dab4fd0a7e93d460f8961902e12e2734dc089586db0e3b52609375ef951da732

.dll 1012KB

dab4fd0a7e93d460f8961902e12e2734dc089586db0e3b52609375ef951da732

IMPHASH 343c64a0a6670fd2787b781591a42e0e
SHA256 dab4fd0a7e93d460f8961902e12e2734dc089586db0e3b52609375ef951da732
MD5 05845db62454ae7137263934fb832d2b
SHA1 2f006ace932c74c4a3de3b44b12b44f46a1462ee
SHA512 518a72e8ac5c497e805d4f34abd8ba7e7c3aa1bb97982a65bf53d3ac2f05f31f096d37cf2adcc82e0ae4c8d8880ce9ba5a93b38577172296f4710a7398291f88
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

298903

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount HeapAlloc HeapFree RtlUnwind HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep SetHandleCount GetFileType GetFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GetCurrentProcessId CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA LoadLibraryA GetModuleHandleA GetProcAddress GlobalFree CopyFileA GlobalSize FormatMessageA LocalFree MulDiv SetLastError GlobalAlloc GlobalLock GlobalUnlock ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetStartupInfoA InterlockedExchange

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA SetParent UnionRect PostThreadMessageA SetTimer KillTimer GetDCEx LockWindowUpdate MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId ShowOwnedPopups SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow SetRect BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible UpdateWindow GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA SendMessageA EnableWindow CharLowerA CharLowerW CharUpperA CharUpperW EnableMenuItem CheckMenuItem MapVirtualKeyA GetKeyNameTextA CopyRect IsWindow EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient IsRectEmpty CopyAcceleratorTableA CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu LoadCursorA GetSysColorBrush DestroyMenu GetMenuItemInfoA DispatchMessageA SetWindowContextHelpId DrawIcon AppendMenuA PostMessageA GetSystemMenu IsIconic GetClientRect MapWindowPoints InvalidateRect LoadIconA GetSystemMetrics CloseClipboard SetClipboardData EmptyClipboard OpenClipboard PtInRect InflateRect OffsetRect FrameRect SetCapture GetParent GetSysColor ReleaseCapture RemoveMenu GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID GetMenuStringA GetMenuState FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetClassLongA

gdi32

SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ScaleViewportExtEx ExtCreatePen CreateHatchBrush CreateRectRgnIndirect PatBlt GetDCOrgEx CreateFontIndirectA GetTextExtentPoint32A SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthA CreateFontA StretchDIBits SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel CreatePen GetStockObject GetWindowExtEx GetViewportExtEx GetObjectA SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC CreateDCA CopyMetaFileA GetDeviceCaps Ellipse SetBrushOrgEx CreateBitmap CreateBrushIndirect CreateSolidBrush BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

ExtractIconA DragFinish DragQueryFileA SHGetFileInfoA

shlwapi

PathFindExtensionA ColorHLSToRGB PathRemoveExtensionA PathFindFileNameA PathStripToRootA ColorRGBToHLS ColorAdjustLuma PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject StringFromGUID2 CoCreateInstance CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate OleCreateFontIndirect SysAllocString LoadTypeLi VariantClear

Name

.text

Size

600KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

200KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ