2159f41b45bd367027d27640b327dc27d5ea172d2c9633ab9744a45538ef91f6

Sharing

Copy URL Twitter E-mail

General

Target
2159f41b45bd367027d27640b327dc27d5ea172d2c9633ab9744a45538ef91f6
Size 588KB
Sample220322-qj5esafea4
SHA256 2159f41b45bd367027d27640b327dc27d5ea172d2c9633ab9744a45538ef91f6
MD5 0e2fe6406cf3318d44a0972401d1b7ff
SHA1 c6a30f5bdb8b4180fb39ba3d2f14c56c219784f9
SHA512 3bedb9e6502d0683246a51e446cc707327dbf5b9e3b4f9d01f872972abea6e29a703b25751d27af4eb42a17c5e8f90de58c3bd0257a462ca924c4514518afd13
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

2159f41b45bd367027d27640b327dc27d5ea172d2c9633ab9744a45538ef91f6

.dll 588KB

2159f41b45bd367027d27640b327dc27d5ea172d2c9633ab9744a45538ef91f6

IMPHASH e0b213ccd96f46d30dcd8e225f4e9fc9
SHA256 2159f41b45bd367027d27640b327dc27d5ea172d2c9633ab9744a45538ef91f6
MD5 0e2fe6406cf3318d44a0972401d1b7ff
SHA1 c6a30f5bdb8b4180fb39ba3d2f14c56c219784f9
SHA512 3bedb9e6502d0683246a51e446cc707327dbf5b9e3b4f9d01f872972abea6e29a703b25751d27af4eb42a17c5e8f90de58c3bd0257a462ca924c4514518afd13
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

223712

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA GetFileTime GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetProcessHeap HeapSize HeapDestroy HeapCreate VirtualFree GetStdHandle Sleep SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalDeleteAtom GetModuleHandleA SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv FreeLibrary LoadLibraryA GetProcAddress ExitProcess GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetFileType InterlockedExchange

user32

MessageBeep DestroyMenu UnregisterClassA RegisterClipboardFormatA PostThreadMessageA EndPaint BeginPaint GetWindowDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen GetSysColorBrush ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos GetNextDlgGroupItem SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow SetWindowContextHelpId MapDialogRect GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA CharUpperA EnableWindow SetWindowPos SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible PeekMessageA ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA MapWindowPoints SetCapture SendMessageA LoadIconA PtInRect GetWindowLongA GetKeyState GetWindowRect GetCursorPos UpdateWindow InvalidateRect SetCursor LoadCursorA BringWindowToTop IsWindow ScreenToClient ReleaseDC GetDC ReleaseCapture SetFocus GetFocus GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetForegroundWindow

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor GetRgnBox GetMapMode ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible LineTo GetWindowExtEx GetViewportExtEx SetMapMode RestoreDC SaveDC DeleteObject CreateRectRgnIndirect GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps MoveToEx

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shell32

SHGetFileInfoA

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysAllocStringByteLen SysStringLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString