0d44f2242ec1794b134db7741bcc13773f78eb0994beae41badf8b787e78ef94

Sharing

Copy URL Twitter E-mail

General

Target
0d44f2242ec1794b134db7741bcc13773f78eb0994beae41badf8b787e78ef94
Size 520KB
Sample220322-qfh3dafdd9
SHA256 0d44f2242ec1794b134db7741bcc13773f78eb0994beae41badf8b787e78ef94
MD5 a7500426a2098edd5687b28bc7b3061a
SHA1 a9e757acd4614d7164d5fd4fc2aa23f101b20c2d
SHA512 5bd5eec169cefa34fb87055a6320502d6ac0d0f6ace6ddd5ad5a5568259317cf3ef916b4396647650957491785c322dee6fb53e85c65ba9401d64152f0f9e6dc
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

0d44f2242ec1794b134db7741bcc13773f78eb0994beae41badf8b787e78ef94

.dll 520KB

0d44f2242ec1794b134db7741bcc13773f78eb0994beae41badf8b787e78ef94

IMPHASH 42fe0d732d1bb90c6a7a1bcfb8ef88aa
SHA256 0d44f2242ec1794b134db7741bcc13773f78eb0994beae41badf8b787e78ef94
MD5 a7500426a2098edd5687b28bc7b3061a
SHA1 a9e757acd4614d7164d5fd4fc2aa23f101b20c2d
SHA512 5bd5eec169cefa34fb87055a6320502d6ac0d0f6ace6ddd5ad5a5568259317cf3ef916b4396647650957491785c322dee6fb53e85c65ba9401d64152f0f9e6dc
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

149870

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedIncrement WritePrivateProfileStringA InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW FreeResource CloseHandle GlobalAddAtomA SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA lstrcmpiA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA UnhandledExceptionFilter InterlockedExchange

user32

PostThreadMessageA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA GetSysColorBrush EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCapture ClientToScreen wsprintfA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA IsChild GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos RegisterClipboardFormatA SetForegroundWindow GetClientRect GetMenu GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect CharUpperA EnableWindow SetWindowPos SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect MessageBoxA MapWindowPoints DestroyMenu GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus PostMessageA PostQuitMessage GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState IsWindowEnabled GetLastActivePopup GetParent

gdi32

GetBkColor GetTextColor GetRgnBox GetMapMode GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA LineTo RectVisible PtVisible GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx TextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFileInfoA

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString