d5d04787da55c21f9d723505e23a70a76b8a76a8c19e1596ce66d9e5a1f798a3

Sharing

Copy URL Twitter E-mail

General

Target
d5d04787da55c21f9d723505e23a70a76b8a76a8c19e1596ce66d9e5a1f798a3
Size 780KB
Sample220322-rtms6acdbm
SHA256 d5d04787da55c21f9d723505e23a70a76b8a76a8c19e1596ce66d9e5a1f798a3
MD5 be7ecb4d863fc53d75ebadec1a1b188d
SHA1 51e2c343ab633e89c418d4de648598062aa9b5e0
SHA512 cf48f88a6edf36630cb392f10ead36eddc5b726e8473bb41cfb9c5b6a14aabf72f48d07524c7b38def6b5296b6ff0ba57c8e9b9558efe76a682ded9a792010cd
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

d5d04787da55c21f9d723505e23a70a76b8a76a8c19e1596ce66d9e5a1f798a3

.dll 780KB

d5d04787da55c21f9d723505e23a70a76b8a76a8c19e1596ce66d9e5a1f798a3

IMPHASH cd97bd977cef263c697f451ae2c47380
SHA256 d5d04787da55c21f9d723505e23a70a76b8a76a8c19e1596ce66d9e5a1f798a3
MD5 be7ecb4d863fc53d75ebadec1a1b188d
SHA1 51e2c343ab633e89c418d4de648598062aa9b5e0
SHA512 cf48f88a6edf36630cb392f10ead36eddc5b726e8473bb41cfb9c5b6a14aabf72f48d07524c7b38def6b5296b6ff0ba57c8e9b9558efe76a682ded9a792010cd
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

135001

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA HeapReAlloc RtlUnwind RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA HeapAlloc GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo InterlockedIncrement GetModuleHandleW TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc FileTimeToSystemTime GetThreadLocale GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError MultiByteToWideChar LockResource GetLastError SizeofResource WideCharToMultiByte LoadResource FindResourceA ExitProcess lstrcpyA WinExec LoadLibraryA lstrcatA GetWindowsDirectoryA FreeLibrary FreeEnvironmentStringsA lstrlenA

user32

RegisterClipboardFormatA PostThreadMessageA DestroyMenu GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow ValidateRect SetWindowContextHelpId MapDialogRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GetWindowThreadProcessId GetCursorPos WindowFromPoint IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement EnableWindow SendMessageA LoadCursorA ReleaseCapture GetWindow CopyRect GetMenuItemID GetMenuItemCount GetSubMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA GetWindowTextA IsWindow GetSysColor ReleaseDC InvalidateRect CopyIcon InflateRect GetDC PtInRect GetClientRect MessageBeep GetParent SetCapture GetWindowRect SetCursor PostMessageA GetSysColorBrush TabbedTextOutA RedrawWindow DrawStateA ChildWindowFromPoint DrawTextExA GrayStringA GetFocus DrawTextA ScreenToClient SetWindowRgn GetSystemMetrics CreateWindowExW AppendMenuA ShowWindow DrawIcon LoadIconA IsIconic GetSystemMenu CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetCapture

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SelectObject GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx GetStockObject SetMapMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect GetDeviceCaps CreateBitmap BitBlt DeleteObject CreateCompatibleDC CreateCompatibleBitmap Ellipse PtVisible FillRgn SetPixelV Escape RectVisible CreateEllipticRgnIndirect ExtTextOutA CreateSolidBrush TextOutA GetTextExtentPoint32A CreateFontIndirectA GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegCloseKey RegQueryValueA RegOpenKeyExA

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysFreeString SysAllocStringByteLen VariantClear VariantChangeType VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString SysStringLen