b2e51144c8ea5afcec954b11e5a8d2b8c010c96032dbe50d672e35a529ced4da

Sharing

Copy URL Twitter E-mail

General

Target
b2e51144c8ea5afcec954b11e5a8d2b8c010c96032dbe50d672e35a529ced4da
Size 516KB
Sample220322-qfh3dafdd6
SHA256 b2e51144c8ea5afcec954b11e5a8d2b8c010c96032dbe50d672e35a529ced4da
MD5 47dcf2a917bb4a64d1c75509f26fbece
SHA1 7e423e0c8365ba3a40223fe604b700a7cf1af358
SHA512 b201fa809800e218e473d405b94d8554728891ea89a96e2323e5d30ba27523ecc447cbd8f0256a9b072db94fc7b629f9c58c6cc53aba03036bfaf5c9aa7da820
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

b2e51144c8ea5afcec954b11e5a8d2b8c010c96032dbe50d672e35a529ced4da

.dll 516KB

b2e51144c8ea5afcec954b11e5a8d2b8c010c96032dbe50d672e35a529ced4da

IMPHASH 42fe0d732d1bb90c6a7a1bcfb8ef88aa
SHA256 b2e51144c8ea5afcec954b11e5a8d2b8c010c96032dbe50d672e35a529ced4da
MD5 47dcf2a917bb4a64d1c75509f26fbece
SHA1 7e423e0c8365ba3a40223fe604b700a7cf1af358
SHA512 b201fa809800e218e473d405b94d8554728891ea89a96e2323e5d30ba27523ecc447cbd8f0256a9b072db94fc7b629f9c58c6cc53aba03036bfaf5c9aa7da820
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

152686

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedIncrement WritePrivateProfileStringA InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource CloseHandle GlobalAddAtomA SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA lstrcmpiA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA UnhandledExceptionFilter InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCapture ClientToScreen wsprintfA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA IsChild GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos RegisterClipboardFormatA SetForegroundWindow GetClientRect GetMenu GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect CharUpperA EnableWindow SetWindowPos SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect MessageBoxA MapWindowPoints DestroyMenu GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus PostMessageA PostQuitMessage GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState IsWindowEnabled GetLastActivePopup GetParent

gdi32

GetBkColor GetTextColor GetRgnBox GetMapMode GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA LineTo RectVisible PtVisible GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx TextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFileInfoA

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString