1ffcaec89787b7c0661e15475bd45cca4d4ba8cc6bd15a16ef9b87673bdae631

Sharing

Copy URL Twitter E-mail

General

Target
1ffcaec89787b7c0661e15475bd45cca4d4ba8cc6bd15a16ef9b87673bdae631
Size 520KB
Sample220322-qfh3dabgap
SHA256 1ffcaec89787b7c0661e15475bd45cca4d4ba8cc6bd15a16ef9b87673bdae631
MD5 24e0e71cf20aa56c0dc5e6ea6fcc3e14
SHA1 385e7a069d66283400e7a1712ccce9b8c7403c57
SHA512 3468a5c08309f20abcf6268fc237015c9df759032be11592f1d048043695cda7b354a06fde913f248915ee9fd1385d8f3bc664ea1bc26268c6a97f27118b6e8a
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

1ffcaec89787b7c0661e15475bd45cca4d4ba8cc6bd15a16ef9b87673bdae631

.dll 520KB

1ffcaec89787b7c0661e15475bd45cca4d4ba8cc6bd15a16ef9b87673bdae631

IMPHASH 42fe0d732d1bb90c6a7a1bcfb8ef88aa
SHA256 1ffcaec89787b7c0661e15475bd45cca4d4ba8cc6bd15a16ef9b87673bdae631
MD5 24e0e71cf20aa56c0dc5e6ea6fcc3e14
SHA1 385e7a069d66283400e7a1712ccce9b8c7403c57
SHA512 3468a5c08309f20abcf6268fc237015c9df759032be11592f1d048043695cda7b354a06fde913f248915ee9fd1385d8f3bc664ea1bc26268c6a97f27118b6e8a
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

149870

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedIncrement WritePrivateProfileStringA InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource CloseHandle GlobalAddAtomA SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA lstrcmpiA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA UnhandledExceptionFilter InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCapture ClientToScreen wsprintfA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA IsChild GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos RegisterClipboardFormatA SetForegroundWindow GetClientRect GetMenu GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect CharUpperA EnableWindow SetWindowPos SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect MessageBoxA MapWindowPoints DestroyMenu GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus PostMessageA PostQuitMessage GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState IsWindowEnabled GetLastActivePopup GetParent

gdi32

GetBkColor GetTextColor GetRgnBox GetMapMode GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA LineTo RectVisible PtVisible GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx TextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFileInfoA

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString