d57728d65fe3b72016fbdbb42bd88f35a2cb17aaa83b1191255077b97e7617d5

Sharing

Copy URL Twitter E-mail

General

Target
d57728d65fe3b72016fbdbb42bd88f35a2cb17aaa83b1191255077b97e7617d5
Size 1004KB
Sample220322-qdstssbfgp
SHA256 d57728d65fe3b72016fbdbb42bd88f35a2cb17aaa83b1191255077b97e7617d5
MD5 7ac7d04d0658948e4165baeb2706a52e
SHA1 1a1475a4b635b7a5549cba4e7aea09b2ac9f18e3
SHA512 1d2a265f3df7942e908a9aa815d5e42822df4b6c19be09eecfd13f4f23de1b4182ddb2ab6a1924b8400fa9311e6e49157f220561752ecba102aa1bbed12d1fae
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

d57728d65fe3b72016fbdbb42bd88f35a2cb17aaa83b1191255077b97e7617d5

.dll 1004KB

d57728d65fe3b72016fbdbb42bd88f35a2cb17aaa83b1191255077b97e7617d5

IMPHASH 343c64a0a6670fd2787b781591a42e0e
SHA256 d57728d65fe3b72016fbdbb42bd88f35a2cb17aaa83b1191255077b97e7617d5
MD5 7ac7d04d0658948e4165baeb2706a52e
SHA1 1a1475a4b635b7a5549cba4e7aea09b2ac9f18e3
SHA512 1d2a265f3df7942e908a9aa815d5e42822df4b6c19be09eecfd13f4f23de1b4182ddb2ab6a1924b8400fa9311e6e49157f220561752ecba102aa1bbed12d1fae
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

298535

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount HeapAlloc HeapFree RtlUnwind HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA GetProcessHeap RaiseException ExitThread CreateThread HeapSize FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep SetHandleCount GetFileType GetFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP SetConsoleCtrlHandler GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode CreateFileA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA SystemTimeToFileTime FileTimeToSystemTime GetThreadLocale GetAtomNameA GetOEMCP GetCPInfo GlobalFlags InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GetCurrentProcessId CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA LoadLibraryA GetModuleHandleA GetProcAddress GlobalFree CopyFileA GlobalSize FormatMessageA LocalFree MulDiv SetLastError GlobalAlloc GlobalLock GlobalUnlock ExitProcess FindResourceA LoadResource LockResource SizeofResource GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrlenA lstrcmpiW lstrcmpiA CompareStringW CompareStringA lstrlenW GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetStartupInfoA InterlockedExchange

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA TranslateAcceleratorA SetMenu BringWindowToTop SetRectEmpty CreatePopupMenu InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam RegisterClipboardFormatA SetParent UnionRect PostThreadMessageA SetTimer KillTimer GetDCEx LockWindowUpdate MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId ShowOwnedPopups SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage ScrollWindowEx IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow SetRect BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA ScrollWindow TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible UpdateWindow GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA SendMessageA EnableWindow CharLowerA CharLowerW CharUpperA CharUpperW EnableMenuItem CheckMenuItem MapVirtualKeyA GetKeyNameTextA CopyRect IsWindow EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient IsRectEmpty CopyAcceleratorTableA CharNextA GetDialogBaseUnits DestroyIcon WaitMessage WindowFromPoint DeleteMenu LoadCursorA GetSysColorBrush DestroyMenu GetMenuItemInfoA DispatchMessageA SetWindowContextHelpId DrawIcon AppendMenuA PostMessageA GetSystemMenu IsIconic GetClientRect MapWindowPoints InvalidateRect LoadIconA GetSystemMetrics CloseClipboard SetClipboardData EmptyClipboard OpenClipboard PtInRect InflateRect OffsetRect FrameRect SetCapture GetParent GetSysColor ReleaseCapture RemoveMenu GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID GetMenuStringA GetMenuState FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetClassLongA

gdi32

SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile ScaleViewportExtEx ExtCreatePen CreateHatchBrush CreateRectRgnIndirect PatBlt GetDCOrgEx CreateFontIndirectA GetTextExtentPoint32A SetRectRgn CombineRgn GetMapMode DPtoLP GetTextMetricsA GetBkColor GetTextColor GetRgnBox CreateCompatibleBitmap GetCharWidthA CreateFontA StretchDIBits SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel CreatePen GetStockObject GetWindowExtEx GetViewportExtEx GetObjectA SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect GetClipBox SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetTextColor SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SetBkColor RestoreDC SaveDC CreateDCA CopyMetaFileA GetDeviceCaps Ellipse SetBrushOrgEx CreateBitmap CreateBrushIndirect CreateSolidBrush BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

ExtractIconA DragFinish DragQueryFileA SHGetFileInfoA

shlwapi

PathFindExtensionA ColorHLSToRGB PathRemoveExtensionA PathFindFileNameA PathStripToRootA ColorRGBToHLS ColorAdjustLuma PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize OleRun CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject StringFromGUID2 CoCreateInstance CoDisconnectObject CLSIDFromString CoRevokeClassObject OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CreateBindCtx CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree OleIsCurrentClipboard OleSetClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID CreateStreamOnHGlobal

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate OleCreateFontIndirect SysAllocString LoadTypeLi VariantClear

Name

.text

Size

600KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

192KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ