217fdfe1a56bce7bcbf7b5c314d6e2796acc6aa0b96f86ca195ecaa7101bc7e2

Sharing

Copy URL Twitter E-mail

General

Target
217fdfe1a56bce7bcbf7b5c314d6e2796acc6aa0b96f86ca195ecaa7101bc7e2
Size 588KB
Sample220322-qj5esafea3
SHA256 217fdfe1a56bce7bcbf7b5c314d6e2796acc6aa0b96f86ca195ecaa7101bc7e2
MD5 9836d82ced841a9e22fdaa0876c9d5fe
SHA1 8ab93eb9bcf836705445935146ab699d1d1dd7d7
SHA512 14ac41db57d8eff9861d09bc340e16ed02c222e238e38745ba47566777ee0b1d8ac522966f63fc443bd64a2c095696ce70086b29942ebea1c85dd0cbc9c0c0cf
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

217fdfe1a56bce7bcbf7b5c314d6e2796acc6aa0b96f86ca195ecaa7101bc7e2

.dll 588KB

217fdfe1a56bce7bcbf7b5c314d6e2796acc6aa0b96f86ca195ecaa7101bc7e2

IMPHASH e0b213ccd96f46d30dcd8e225f4e9fc9
SHA256 217fdfe1a56bce7bcbf7b5c314d6e2796acc6aa0b96f86ca195ecaa7101bc7e2
MD5 9836d82ced841a9e22fdaa0876c9d5fe
SHA1 8ab93eb9bcf836705445935146ab699d1d1dd7d7
SHA512 14ac41db57d8eff9861d09bc340e16ed02c222e238e38745ba47566777ee0b1d8ac522966f63fc443bd64a2c095696ce70086b29942ebea1c85dd0cbc9c0c0cf
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

223712

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap HeapSize HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalDeleteAtom GetModuleHandleA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetFileType InterlockedExchange

user32

MessageBeep DestroyMenu UnregisterClassA RegisterClipboardFormatA PostThreadMessageA EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen GetSysColorBrush ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos GetNextDlgGroupItem SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA CharUpperA EnableWindow SetWindowPos SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA MapWindowPoints SetCapture SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetForegroundWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible LineTo GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shell32

SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysAllocStringByteLen SysStringLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString