ae2058bbcff0d9ce8d0c4a9f0a6155dd

Sharing

Copy URL Twitter E-mail

General

Target
ae2058bbcff0d9ce8d0c4a9f0a6155dd
Size 840KB
Sample220323-kwt7pabaf2
SHA256 4c7d4d930180ce0a0396cc8d0f40a2e2dbdd544df72cdf99389bc693aaba7ffd
MD5 ae2058bbcff0d9ce8d0c4a9f0a6155dd
SHA1 efd0d38bad0ba16a70276780052b42d3f75c21ae
SHA512 f60f3b340d4d1ef6ec05c7020db8c0686502a3925e9b7a44e6563251ecacd897186daab573ca545a323aa4212e41c4c8ddfcb381b126f704d86bef3bc5067cae
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

ae2058bbcff0d9ce8d0c4a9f0a6155dd

.dll 840KB

ae2058bbcff0d9ce8d0c4a9f0a6155dd

IMPHASH 70b8cfa68ef2c7898ee65b9a0ce218ac
SHA256 4c7d4d930180ce0a0396cc8d0f40a2e2dbdd544df72cdf99389bc693aaba7ffd
MD5 ae2058bbcff0d9ce8d0c4a9f0a6155dd
SHA1 efd0d38bad0ba16a70276780052b42d3f75c21ae
SHA512 f60f3b340d4d1ef6ec05c7020db8c0686502a3925e9b7a44e6563251ecacd897186daab573ca545a323aa4212e41c4c8ddfcb381b126f704d86bef3bc5067cae
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

230416

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetFullPathNameA CreateFileA GetShortPathNameA GetCPInfo GetOEMCP FileTimeToSystemTime SystemTimeToFileTime SetErrorMode FileTimeToLocalFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime HeapFree RtlUnwind HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA TerminateProcess ExitThread CreateThread HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA FindFirstFileA SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalAddAtomA SetLastError GlobalFree CopyFileA MulDiv GlobalSize GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcatA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeLibrary LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA IsBadWritePtr InterlockedExchange

user32

GetSysColorBrush DestroyIcon GetDialogBaseUnits GetMenuItemInfoA DestroyMenu FillRect wsprintfA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow DeleteMenu AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow GetSysColor SendMessageA MessageBeep CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos WindowFromPoint EndPaint BeginPaint GetWindowDC ValidateRect MessageBoxA ClientToScreen GrayStringA DrawTextExA DrawTextA GetMenu TabbedTextOutA SetCapture RedrawWindow ReleaseCapture PtInRect GetClientRect SetCursor SetWindowLongA IsWindow InvalidateRect InflateRect ReleaseDC GetDC GetParent GetWindowRect CopyIcon LoadCursorA PostQuitMessage PostMessageA GetWindowLongA GetLastActivePopup IsWindowEnabled ShowOwnedPopups GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu SetScrollInfo

gdi32

GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType StartDocA PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetTextMetricsA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible EnumMetaFile GetStockObject GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCA CopyMetaFileA GetDeviceCaps GetTextExtentPoint32A GetObjectA CreateFontIndirectA PtVisible

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteKeyA RegCreateKeyA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegEnumKeyA RegCloseKey RegOpenKeyA RegSetValueA RegQueryValueExA RegOpenKeyExA RegQueryValueA

shell32

ExtractIconA SHGetFileInfoA ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

ole32

CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg CreateBindCtx WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString OleRegGetUserType

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

504KB

Virtual Size

501KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

172KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

64KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ