3ea9c25661d9acc67eed3e0017804f24

Sharing

Copy URL Twitter E-mail

General

Target
3ea9c25661d9acc67eed3e0017804f24
Size 880KB
Sample220323-qrt9sabccp
SHA256 7ce2138859027056edf4cdfe67ee976430361fcafd5b27abaaa6e686ba732950
MD5 3ea9c25661d9acc67eed3e0017804f24
SHA1 f15c3b11d3fc18c557f120a1d741604c2a5d5871
SHA512 61cde20cc29113afe219d0942afc9fe87ac2ee5f94d9bb8665421ab24a492456f69da6a40fc464eec2f6da64bbb6dccefb34f06d321a009da48b04d1972d7857
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

3ea9c25661d9acc67eed3e0017804f24

.dll 880KB

3ea9c25661d9acc67eed3e0017804f24

IMPHASH 70b8cfa68ef2c7898ee65b9a0ce218ac
SHA256 7ce2138859027056edf4cdfe67ee976430361fcafd5b27abaaa6e686ba732950
MD5 3ea9c25661d9acc67eed3e0017804f24
SHA1 f15c3b11d3fc18c557f120a1d741604c2a5d5871
SHA512 61cde20cc29113afe219d0942afc9fe87ac2ee5f94d9bb8665421ab24a492456f69da6a40fc464eec2f6da64bbb6dccefb34f06d321a009da48b04d1972d7857
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

259968

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetFullPathNameA CreateFileA GetShortPathNameA GetCPInfo GetOEMCP FileTimeToSystemTime SystemTimeToFileTime SetErrorMode FileTimeToLocalFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime HeapFree RtlUnwind HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetCommandLineA TerminateProcess ExitThread CreateThread HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA FindFirstFileA SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW SetEnvironmentVariableA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GlobalAddAtomA SetLastError GlobalFree CopyFileA MulDiv GlobalSize GlobalUnlock FormatMessageA lstrcpynA LocalFree GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcatA WinExec lstrcpyA GetWindowsDirectoryA LoadLibraryA FreeLibrary LoadResource LockResource SizeofResource FindResourceA ExitProcess GetLastError lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA IsBadWritePtr InterlockedExchange

user32

GetSysColorBrush DestroyIcon GetDialogBaseUnits GetMenuItemInfoA DestroyMenu FillRect wsprintfA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow DeleteMenu AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow GetSysColor SendMessageA MessageBeep CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos WindowFromPoint EndPaint BeginPaint GetWindowDC ValidateRect MessageBoxA ClientToScreen GrayStringA DrawTextExA DrawTextA GetMenu TabbedTextOutA SetCapture RedrawWindow ReleaseCapture PtInRect GetClientRect SetCursor SetWindowLongA IsWindow InvalidateRect InflateRect ReleaseDC GetDC GetParent GetWindowRect CopyIcon LoadCursorA PostQuitMessage PostMessageA GetWindowLongA GetLastActivePopup IsWindowEnabled ShowOwnedPopups GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu SetScrollInfo

gdi32

GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush CreateCompatibleDC SelectPalette PlayMetaFileRecord GetObjectType StartDocA PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetTextMetricsA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt DPtoLP ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible EnumMetaFile GetStockObject GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCA CopyMetaFileA GetDeviceCaps GetTextExtentPoint32A GetObjectA CreateFontIndirectA PtVisible

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteKeyA RegCreateKeyA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegEnumKeyA RegCloseKey RegOpenKeyA RegSetValueA RegQueryValueExA RegOpenKeyExA RegQueryValueA

shell32

ExtractIconA SHGetFileInfoA ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

ole32

CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg CreateBindCtx WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString OleRegGetUserType

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

532KB

Virtual Size

530KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

176KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

72KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ