d9c1495eb299290eff505de16198744503dcf93359f6c23b81b7efb95e4bb3c1

Sharing

Copy URL Twitter E-mail

General

Target
d9c1495eb299290eff505de16198744503dcf93359f6c23b81b7efb95e4bb3c1
Size 780KB
Sample220322-rtms6acdbn
SHA256 d9c1495eb299290eff505de16198744503dcf93359f6c23b81b7efb95e4bb3c1
MD5 8abec13f023902ebbb957898bda65a1c
SHA1 a559b7e86965c6456b05fe8ad3c2cc9ea6b28bcb
SHA512 e24b704e2e9a28c3a34e73da4954f3a3c1fdd144b9aaaddd69aa3e96e63e5fdd12ddc2c1b649f504804def8018b00b8c7d2e919c97d82685781aaad91612e9ac
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

d9c1495eb299290eff505de16198744503dcf93359f6c23b81b7efb95e4bb3c1

.dll 780KB

d9c1495eb299290eff505de16198744503dcf93359f6c23b81b7efb95e4bb3c1

IMPHASH cd97bd977cef263c697f451ae2c47380
SHA256 d9c1495eb299290eff505de16198744503dcf93359f6c23b81b7efb95e4bb3c1
MD5 8abec13f023902ebbb957898bda65a1c
SHA1 a559b7e86965c6456b05fe8ad3c2cc9ea6b28bcb
SHA512 e24b704e2e9a28c3a34e73da4954f3a3c1fdd144b9aaaddd69aa3e96e63e5fdd12ddc2c1b649f504804def8018b00b8c7d2e919c97d82685781aaad91612e9ac
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

135001

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineA HeapReAlloc RtlUnwind RaiseException VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery Sleep HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA HeapAlloc GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA HeapFree GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo InterlockedIncrement GetModuleHandleW TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc FileTimeToSystemTime GetThreadLocale GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentProcessId GetModuleFileNameA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError MultiByteToWideChar LockResource GetLastError SizeofResource WideCharToMultiByte LoadResource FindResourceA ExitProcess lstrcpyA WinExec LoadLibraryA lstrcatA GetWindowsDirectoryA FreeLibrary FreeEnvironmentStringsA lstrlenA

user32

RegisterClipboardFormatA PostThreadMessageA DestroyMenu GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow ValidateRect SetWindowContextHelpId MapDialogRect PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GetWindowThreadProcessId GetCursorPos WindowFromPoint IsWindowEnabled MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible UpdateWindow MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement EnableWindow SendMessageA LoadCursorA ReleaseCapture GetWindow CopyRect GetMenuItemID GetMenuItemCount GetSubMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA GetWindowTextA IsWindow GetSysColor ReleaseDC InvalidateRect CopyIcon InflateRect GetDC PtInRect GetClientRect MessageBeep GetParent SetCapture GetWindowRect SetCursor PostMessageA GetSysColorBrush TabbedTextOutA RedrawWindow DrawStateA ChildWindowFromPoint DrawTextExA GrayStringA GetFocus DrawTextA ScreenToClient SetWindowRgn GetSystemMetrics CreateWindowExW AppendMenuA ShowWindow DrawIcon LoadIconA IsIconic GetSystemMenu CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetCapture

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SelectObject GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx GetStockObject SetMapMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect GetDeviceCaps CreateBitmap BitBlt DeleteObject CreateCompatibleDC CreateCompatibleBitmap Ellipse PtVisible FillRgn SetPixelV Escape RectVisible CreateEllipticRgnIndirect ExtTextOutA CreateSolidBrush TextOutA GetTextExtentPoint32A CreateFontIndirectA GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegQueryValueExA RegCloseKey RegQueryValueA RegOpenKeyExA

shell32

ShellExecuteA

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysFreeString SysAllocStringByteLen VariantClear VariantChangeType VariantInit SysAllocStringLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString SysStringLen