6844d7e60d76e5e95d163e28d540e1d527b8ac833801cf18e4da9e138a2b80ce

Sharing

Copy URL Twitter E-mail

General

Target
6844d7e60d76e5e95d163e28d540e1d527b8ac833801cf18e4da9e138a2b80ce
Size 516KB
Sample220322-qeyfnsfdd3
SHA256 6844d7e60d76e5e95d163e28d540e1d527b8ac833801cf18e4da9e138a2b80ce
MD5 0b472cf9909ae60b8cf4a96eaa3ac263
SHA1 18ad0ffe032f5668d7afd1d96365d05e7e89307e
SHA512 7fc1fef2cae848fa35c46315c66424604b1eb26b198bc3be310bbda97f358756f7bf82570f1adc455cc776f252dcaf4a7d33715782ced3046f5e6979f4b2aaa3
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

6844d7e60d76e5e95d163e28d540e1d527b8ac833801cf18e4da9e138a2b80ce

.dll 516KB

6844d7e60d76e5e95d163e28d540e1d527b8ac833801cf18e4da9e138a2b80ce

IMPHASH 42fe0d732d1bb90c6a7a1bcfb8ef88aa
SHA256 6844d7e60d76e5e95d163e28d540e1d527b8ac833801cf18e4da9e138a2b80ce
MD5 0b472cf9909ae60b8cf4a96eaa3ac263
SHA1 18ad0ffe032f5668d7afd1d96365d05e7e89307e
SHA512 7fc1fef2cae848fa35c46315c66424604b1eb26b198bc3be310bbda97f358756f7bf82570f1adc455cc776f252dcaf4a7d33715782ced3046f5e6979f4b2aaa3
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

152686

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedIncrement WritePrivateProfileStringA InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource CloseHandle GlobalAddAtomA SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA lstrcmpiA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA UnhandledExceptionFilter InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCapture ClientToScreen wsprintfA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA IsChild GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos RegisterClipboardFormatA SetForegroundWindow GetClientRect GetMenu GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect CharUpperA EnableWindow SetWindowPos SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect MessageBoxA MapWindowPoints DestroyMenu GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus PostMessageA PostQuitMessage GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState IsWindowEnabled GetLastActivePopup GetParent

gdi32

GetBkColor GetTextColor GetRgnBox GetMapMode GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA LineTo RectVisible PtVisible GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx TextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFileInfoA

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString