21ad9afd61ca77ea3a2e9d514437b9ec

Sharing

Copy URL Twitter E-mail

General

Target
21ad9afd61ca77ea3a2e9d514437b9ec
Size 840KB
Sample220323-jxpsxsecgl
SHA256 f479fd7d042a49ff2221663ef07ea63f04a0a48e2b6d053e863127bada73896f
MD5 21ad9afd61ca77ea3a2e9d514437b9ec
SHA1 6d97450ee8b2c1c2903ff34ed6e2570fdab33c24
SHA512 196f89e210d358a99047ef45a4bdf129a2c4c7fa005da34c3185e799749b449820814fc5378826ccd9fd312e887d0b91b9ff51bdd7ea1a1e061e2b06578a34de
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

21ad9afd61ca77ea3a2e9d514437b9ec

.dll 840KB

21ad9afd61ca77ea3a2e9d514437b9ec

IMPHASH 70b8cfa68ef2c7898ee65b9a0ce218ac
SHA256 f479fd7d042a49ff2221663ef07ea63f04a0a48e2b6d053e863127bada73896f
MD5 21ad9afd61ca77ea3a2e9d514437b9ec
SHA1 6d97450ee8b2c1c2903ff34ed6e2570fdab33c24
SHA512 196f89e210d358a99047ef45a4bdf129a2c4c7fa005da34c3185e799749b449820814fc5378826ccd9fd312e887d0b91b9ff51bdd7ea1a1e061e2b06578a34de
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

230416

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetFullPathNameA CreateFileA GetShortPathNameA GetCPInfo GetOEMCP FileTimeToSystemTime SystemTimeToFileTime SetErrorMode FileTimeToLocalFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime HeapFree RtlUnwind HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA TerminateProcess ExitThread CreateThread HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA FindFirstFileA SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalAddAtomA SetLastError GlobalFree CopyFileA MulDiv GlobalSize GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcatA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeLibrary LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA IsBadWritePtr InterlockedExchange

user32

GetSysColorBrush DestroyIcon GetDialogBaseUnits GetMenuItemInfoA DestroyMenu FillRect wsprintfA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow DeleteMenu AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow GetSysColor SendMessageA MessageBeep CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos WindowFromPoint EndPaint BeginPaint GetWindowDC ValidateRect MessageBoxA ClientToScreen GrayStringA DrawTextExA DrawTextA GetMenu TabbedTextOutA SetCapture RedrawWindow ReleaseCapture PtInRect GetClientRect SetCursor SetWindowLongA IsWindow InvalidateRect InflateRect ReleaseDC GetDC GetParent GetWindowRect CopyIcon LoadCursorA PostQuitMessage PostMessageA GetWindowLongA GetLastActivePopup IsWindowEnabled ShowOwnedPopups GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu SetScrollInfo

gdi32

GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType StartDocA PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetTextMetricsA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible EnumMetaFile GetStockObject GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCA CopyMetaFileA GetDeviceCaps GetTextExtentPoint32A GetObjectA CreateFontIndirectA PtVisible

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteKeyA RegCreateKeyA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegEnumKeyA RegCloseKey RegOpenKeyA RegSetValueA RegQueryValueExA RegOpenKeyExA RegQueryValueA

shell32

ExtractIconA SHGetFileInfoA ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

ole32

CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg CreateBindCtx WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString OleRegGetUserType

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

504KB

Virtual Size

501KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

172KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

64KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ