2a5f70f1d393bafbfc6150197ea061862875d77d0b5be5c34a46753b45f73f58

Sharing

Copy URL Twitter E-mail

General

Target
2a5f70f1d393bafbfc6150197ea061862875d77d0b5be5c34a46753b45f73f58
Size 780KB
Sample220322-rdcy1scbcl
SHA256 2a5f70f1d393bafbfc6150197ea061862875d77d0b5be5c34a46753b45f73f58
MD5 5f879f99f62f6587349568ae00b9a7c3
SHA1 c2ba5f108f616aed39e10240f41dfa83231443a3
SHA512 01e8883ec74780a270bbee7998af1ee5c1307bbec7492768609346f474192c34d60707dbe977a8bc01e746b4f7d0d617bde6465d10f865552c805bb1130c5d84
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

2a5f70f1d393bafbfc6150197ea061862875d77d0b5be5c34a46753b45f73f58

.dll 780KB

2a5f70f1d393bafbfc6150197ea061862875d77d0b5be5c34a46753b45f73f58

IMPHASH cd97bd977cef263c697f451ae2c47380
SHA256 2a5f70f1d393bafbfc6150197ea061862875d77d0b5be5c34a46753b45f73f58
MD5 5f879f99f62f6587349568ae00b9a7c3
SHA1 c2ba5f108f616aed39e10240f41dfa83231443a3
SHA512 01e8883ec74780a270bbee7998af1ee5c1307bbec7492768609346f474192c34d60707dbe977a8bc01e746b4f7d0d617bde6465d10f865552c805bb1130c5d84
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

135001

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA HeapReAlloc RtlUnwind RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA HeapAlloc GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo InterlockedIncrement GetModuleHandleW TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc FileTimeToSystemTime GetThreadLocale GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError MultiByteToWideChar LockResource GetLastError SizeofResource WideCharToMultiByte LoadResource FindResourceA ExitProcess lstrcpyA WinExec LoadLibraryA lstrcatA GetWindowsDirectoryA FreeLibrary FreeEnvironmentStringsA lstrlenA

user32

RegisterClipboardFormatA PostThreadMessageA DestroyMenu GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow ValidateRect SetWindowContextHelpId MapDialogRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GetWindowThreadProcessId GetCursorPos WindowFromPoint IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement EnableWindow SendMessageA LoadCursorA ReleaseCapture GetWindow CopyRect GetMenuItemID GetMenuItemCount GetSubMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA GetWindowTextA IsWindow GetSysColor ReleaseDC InvalidateRect CopyIcon InflateRect GetDC PtInRect GetClientRect MessageBeep GetParent SetCapture GetWindowRect SetCursor PostMessageA GetSysColorBrush TabbedTextOutA RedrawWindow DrawStateA ChildWindowFromPoint DrawTextExA GrayStringA GetFocus DrawTextA ScreenToClient SetWindowRgn GetSystemMetrics CreateWindowExW AppendMenuA ShowWindow DrawIcon LoadIconA IsIconic GetSystemMenu CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetCapture

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SelectObject GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx GetStockObject SetMapMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect GetDeviceCaps CreateBitmap BitBlt DeleteObject CreateCompatibleDC CreateCompatibleBitmap Ellipse PtVisible FillRgn SetPixelV Escape RectVisible CreateEllipticRgnIndirect ExtTextOutA CreateSolidBrush TextOutA GetTextExtentPoint32A CreateFontIndirectA GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegCloseKey RegQueryValueA RegOpenKeyExA

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysFreeString SysAllocStringByteLen VariantClear VariantChangeType VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString SysStringLen