e4056edf1bdf53c9bc92b51eb973c243437fb2ab478b0d3e4641730a39cb3faa

Sharing

Copy URL Twitter E-mail

General

Target
e4056edf1bdf53c9bc92b51eb973c243437fb2ab478b0d3e4641730a39cb3faa
Size 600KB
Sample220322-qqxcraffb9
SHA256 e4056edf1bdf53c9bc92b51eb973c243437fb2ab478b0d3e4641730a39cb3faa
MD5 99c137adc9f326be4951ca34ef087b4e
SHA1 6f32bff0eb30cd00886ec4ecd3b9d40315e2f285
SHA512 e8c31af313616d9ffbdeb4b5f0f3f46efce9f95dc480076bc75d05b0bb4a94c1a93bbd8da95071f907a8166eaffbe19eb3e6bef44cfe18685e9c0e60f7a3d5c8
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

e4056edf1bdf53c9bc92b51eb973c243437fb2ab478b0d3e4641730a39cb3faa

.dll 600KB

e4056edf1bdf53c9bc92b51eb973c243437fb2ab478b0d3e4641730a39cb3faa

IMPHASH 987fe31a9a4cd6eac4ce656a05c3724c
SHA256 e4056edf1bdf53c9bc92b51eb973c243437fb2ab478b0d3e4641730a39cb3faa
MD5 99c137adc9f326be4951ca34ef087b4e
SHA1 6f32bff0eb30cd00886ec4ecd3b9d40315e2f285
SHA512 e8c31af313616d9ffbdeb4b5f0f3f46efce9f95dc480076bc75d05b0bb4a94c1a93bbd8da95071f907a8166eaffbe19eb3e6bef44cfe18685e9c0e60f7a3d5c8
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

220917

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount HeapFree RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc GetCommandLineA GetProcessHeap RaiseException HeapSize HeapDestroy HeapCreate VirtualFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle Sleep SetHandleCount GetFileType GetFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW GetVersionExA GetProcAddress GetModuleHandleA LoadLibraryA SetLastError GlobalFree FormatMessageA LocalFree MulDiv LoadResource LockResource SizeofResource FindResourceA GlobalAlloc GlobalLock GlobalUnlock ExitProcess GetLastError lstrlenA WideCharToMultiByte CompareStringA CompareStringW MultiByteToWideChar GetVersion GetStartupInfoA InterlockedExchange

user32

InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetRect GetPropA RemovePropA SetFocus GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos CharUpperA EnableWindow SendMessageA IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem IsRectEmpty CopyAcceleratorTableA CharNextA LoadCursorA GetSysColorBrush DestroyMenu SetPropA SetWindowContextHelpId LoadIconA PostMessageA MapWindowPoints GetClientRect AppendMenuA GetSystemMenu DrawIcon GetSystemMetrics IsIconic InvalidateRect CloseClipboard SetClipboardData EmptyClipboard OpenClipboard InflateRect OffsetRect FrameRect GetSysColor GetParent SetCapture PtInRect ReleaseCapture GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState IsWindow CopyRect GetDC ReleaseDC

gdi32

OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SetViewportOrgEx CreatePen GetMapMode GetBkColor GetTextColor GetRgnBox SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetStockObject DeleteObject SetMapMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect GetDeviceCaps SetBrushOrgEx Ellipse CreateBitmap CreateBrushIndirect CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shlwapi

PathFindExtensionA ColorHLSToRGB PathFindFileNameA PathStripToRootA ColorRGBToHLS ColorAdjustLuma PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString VariantClear