17959d85789e8831046473f4508a4cdd593f72fde95d8fec0abedf6c5c42d6c3

Sharing

Copy URL Twitter E-mail

General

Target
17959d85789e8831046473f4508a4cdd593f72fde95d8fec0abedf6c5c42d6c3
Size 996KB
Sample220323-kc6rdaaeb2
SHA256 17959d85789e8831046473f4508a4cdd593f72fde95d8fec0abedf6c5c42d6c3
MD5 c138fc0c9b0f29f43bc3e7a13634466b
SHA1 b6aad6dd38c9f7c866fe9674941949e7a3df3dfb
SHA512 30e3c79f3461c90a6a114d6d33fd8d6e89bc775124716a2d04f568d2f1b7a7d00747fdca4661b7c677395a303e4b1f9cb144591618f7bd39afb8570674ffa365
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

17959d85789e8831046473f4508a4cdd593f72fde95d8fec0abedf6c5c42d6c3

.dll 996KB

17959d85789e8831046473f4508a4cdd593f72fde95d8fec0abedf6c5c42d6c3

IMPHASH 2a986943d8440d2f00f13ad10b553808
SHA256 17959d85789e8831046473f4508a4cdd593f72fde95d8fec0abedf6c5c42d6c3
MD5 c138fc0c9b0f29f43bc3e7a13634466b
SHA1 b6aad6dd38c9f7c866fe9674941949e7a3df3dfb
SHA512 30e3c79f3461c90a6a114d6d33fd8d6e89bc775124716a2d04f568d2f1b7a7d00747fdca4661b7c677395a303e4b1f9cb144591618f7bd39afb8570674ffa365
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

181136

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapSize VirtualFree VirtualAlloc HeapCreate HeapDestroy GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW GetConsoleCP GetConsoleMode SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings Sleep GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetProcessHeap CreateFileA HeapReAlloc RaiseException RtlUnwind GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapFree HeapAlloc GetCurrentProcess SetEndOfFile FlushFileBuffers SetFilePointer WritePrivateProfileStringW GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection InterlockedIncrement GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW GetLocaleInfoW InterlockedExchange lstrlenA lstrcmpA InterlockedDecrement GetCurrentProcessId GetModuleHandleA GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW LoadLibraryA lstrcmpW GetVersionExA FreeResource GlobalFree FormatMessageW LocalUnlock LocalFree LocalLock LocalAlloc GetModuleFileNameW ReadFile GetTickCount lstrcmpiW GetWindowsDirectoryW lstrcpyW WideCharToMultiByte WinExec lstrlenW lstrcatW FreeLibrary LoadLibraryExW ExitProcess MulDiv GetProcAddress GetModuleHandleW LoadLibraryW GetLastError SetLastError GlobalAlloc GlobalUnlock MultiByteToWideChar GlobalLock CloseHandle WriteFile CreateFileW FindResourceW LoadResource LockResource FreeEnvironmentStringsW SizeofResource

user32

DestroyMenu GetSysColorBrush SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW CheckMenuItem SendDlgItemMessageW SendDlgItemMessageA GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW GetPropW RemovePropW GetFocus GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime PeekMessageW MapWindowPoints TrackPopupMenu SetMenu GetClassInfoExW RegisterClassW AdjustWindowRectEx GetDlgCtrlID CallWindowProcW GetMenu SystemParametersInfoA GetWindowPlacement GetWindowTextLengthW GetScrollPos SetScrollPos GetWindow GetDesktopWindow CreateDialogIndirectParamW DestroyWindow GetNextDlgTabItem DialogBoxIndirectParamW EndDialog SetWindowTextW MoveWindow SetForegroundWindow SetWindowPos SetFocus CheckDlgButton EnableMenuItem GetDlgItem GetDialogBaseUnits EndPaint BeginPaint MessageBoxW GetLastActivePopup GetActiveWindow GetSubMenu LoadMenuW MessageBeep SetWindowLongW TranslateAcceleratorW CreatePopupMenu IsIconic AppendMenuW GetSystemMenu LoadAcceleratorsW LoadIconW UpdateWindow DispatchMessageW TranslateMessage GetKeyState DrawTextW WindowFromDC IsWindowVisible InvalidateRect ReleaseCapture GetMessagePos SetCapture FrameRect DrawEdge InflateRect DrawFocusRect RedrawWindow DrawIcon GetClientRect GetAsyncKeyState GetMenuState GetMenuItemID GetMenuItemCount CopyRect PtInRect GetWindowTextW GetWindowLongW IsWindowEnabled ChildWindowFromPoint GetParent ClientToScreen WindowFromPoint GetMessageW ValidateRect PostQuitMessage GetWindowThreadProcessId GetWindowDC GrayStringW SetWindowRgn OffsetRect SetRect SetTimer EqualRect KillTimer DrawTextExW TabbedTextOutW SetActiveWindow IsDialogMessageW ScreenToClient GetCursorPos IsWindow DefWindowProcW GetClassInfoW SetRectEmpty GetClassNameW LoadCursorW GetSystemMetrics SetCursor SystemParametersInfoW LoadStringW LoadImageW DestroyCursor DestroyIcon CopyIcon FillRect CreateIconIndirect ReleaseDC GetDC GetIconInfo CreateWindowExW ShowWindow IsRectEmpty DrawFrameControl GetSysColor SetClipboardData EmptyClipboard CloseClipboard OpenClipboard PostMessageW GetWindowRect SendMessageW RegisterWindowMessageW EnableWindow WinHelpW

gdi32

PtVisible RectVisible ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DPtoLP SaveDC SetMapMode DeleteDC GetCharWidthW GetCurrentObject GetClipBox Rectangle GetStockObject CreatePolygonRgn CreateRoundRectRgn OffsetRgn CombineRgn CreateRectRgn SelectClipRgn FillRgn FrameRgn TextOutW GetTextExtentPoint32W SetTextJustification GetTextMetricsW SetBkColor SetBkMode CreateFontIndirectW LineTo MoveToEx CreatePen SetTextColor CreateSolidBrush StretchBlt CreateBitmap GetObjectW GetDeviceCaps CreateDCW CreateCompatibleBitmap BitBlt SelectObject CreateCompatibleDC CreateDIBSection DeleteObject RestoreDC

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegOpenKeyW RegQueryValueW RegCloseKey RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegEnumKeyW RegDeleteKeyW RegSetValueExW

shell32

ShellExecuteW

comctl32

ImageList_GetImageCount ImageList_GetIcon ord17

shlwapi

PathFindExtensionW

oleaut32

VariantClear VariantChangeType VariantInit

winmm

PlaySoundW