aed7f00eae1234d39232f3e3075009a4fc7e6e1e78571fe6b9d2b203d4606b46

Sharing

Copy URL Twitter E-mail

General

Target
aed7f00eae1234d39232f3e3075009a4fc7e6e1e78571fe6b9d2b203d4606b46
Size 1004KB
Sample220322-qbmj1afch7
SHA256 aed7f00eae1234d39232f3e3075009a4fc7e6e1e78571fe6b9d2b203d4606b46
MD5 64b5a9fdf6128a94c9954aef2bed3358
SHA1 00cd3bcc41c7ca9ac722fc21bca439e6e518c900
SHA512 db790b126dd0c004fc1e89bac3b04eafa9146ece3dbc021f0dc7a9dbb299a7e53cbd53791365d55113f079fca083c1af854c17dd141ad0921c0314f89f8f0c32
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

aed7f00eae1234d39232f3e3075009a4fc7e6e1e78571fe6b9d2b203d4606b46

.dll 1004KB

aed7f00eae1234d39232f3e3075009a4fc7e6e1e78571fe6b9d2b203d4606b46

IMPHASH 343c64a0a6670fd2787b781591a42e0e
SHA256 aed7f00eae1234d39232f3e3075009a4fc7e6e1e78571fe6b9d2b203d4606b46
MD5 64b5a9fdf6128a94c9954aef2bed3358
SHA1 00cd3bcc41c7ca9ac722fc21bca439e6e518c900
SHA512 db790b126dd0c004fc1e89bac3b04eafa9146ece3dbc021f0dc7a9dbb299a7e53cbd53791365d55113f079fca083c1af854c17dd141ad0921c0314f89f8f0c32
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

298535

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount HeapAlloc HeapFree RtlUnwind HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep SetHandleCount GetFileType GetFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GetCurrentProcessId CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA LoadLibraryA GetModuleHandleA GetProcAddress GlobalFree CopyFileA GlobalSize FormatMessageA LocalFree MulDiv SetLastError GlobalAlloc GlobalLock GlobalUnlock ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetStartupInfoA InterlockedExchange

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA SetParent UnionRect PostThreadMessageA SetTimer KillTimer GetDCEx LockWindowUpdate MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId ShowOwnedPopups SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow SetRect BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible UpdateWindow GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA SendMessageA EnableWindow CharLowerA CharLowerW CharUpperA CharUpperW EnableMenuItem CheckMenuItem MapVirtualKeyA GetKeyNameTextA CopyRect IsWindow EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient IsRectEmpty CopyAcceleratorTableA CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu LoadCursorA GetSysColorBrush DestroyMenu GetMenuItemInfoA DispatchMessageA SetWindowContextHelpId DrawIcon AppendMenuA PostMessageA GetSystemMenu IsIconic GetClientRect MapWindowPoints InvalidateRect LoadIconA GetSystemMetrics CloseClipboard SetClipboardData EmptyClipboard OpenClipboard PtInRect InflateRect OffsetRect FrameRect SetCapture GetParent GetSysColor ReleaseCapture RemoveMenu GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID GetMenuStringA GetMenuState FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetClassLongA

gdi32

SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ScaleViewportExtEx ExtCreatePen CreateHatchBrush CreateRectRgnIndirect PatBlt GetDCOrgEx CreateFontIndirectA GetTextExtentPoint32A SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthA CreateFontA StretchDIBits SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel CreatePen GetStockObject GetWindowExtEx GetViewportExtEx GetObjectA SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC CreateDCA CopyMetaFileA GetDeviceCaps Ellipse SetBrushOrgEx CreateBitmap CreateBrushIndirect CreateSolidBrush BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

ExtractIconA DragFinish DragQueryFileA SHGetFileInfoA

shlwapi

PathFindExtensionA ColorHLSToRGB PathRemoveExtensionA PathFindFileNameA PathStripToRootA ColorRGBToHLS ColorAdjustLuma PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject StringFromGUID2 CoCreateInstance CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate OleCreateFontIndirect SysAllocString LoadTypeLi VariantClear

Name

.text

Size

600KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

192KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ