b87d42b0cf2565f9f51e69e4e8e324e3

Sharing

Copy URL Twitter E-mail

General

Target
b87d42b0cf2565f9f51e69e4e8e324e3
Size 880KB
Sample220324-hwh4badfb2
SHA256 d0776de7e4550a390929eefd92daaeedbfc8e5bbdbb9183d80af13ff659598b0
MD5 b87d42b0cf2565f9f51e69e4e8e324e3
SHA1 8b2d0c75bddc56a18c14008f7d1cbad5fbeac444
SHA512 de532c08cd144f8143a20c09239a730bcc33574b49fddd7ab13380c3913c19ffb111d220ca44209b1e32e70c3a4cf60b5615356f0df7df0f230d301acd554a65
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

b87d42b0cf2565f9f51e69e4e8e324e3

.dll 880KB

b87d42b0cf2565f9f51e69e4e8e324e3

IMPHASH 1e8e7e5b053a6113954e3e4d9100279c
SHA256 d0776de7e4550a390929eefd92daaeedbfc8e5bbdbb9183d80af13ff659598b0
MD5 b87d42b0cf2565f9f51e69e4e8e324e3
SHA1 8b2d0c75bddc56a18c14008f7d1cbad5fbeac444
SHA512 de532c08cd144f8143a20c09239a730bcc33574b49fddd7ab13380c3913c19ffb111d220ca44209b1e32e70c3a4cf60b5615356f0df7df0f230d301acd554a65
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

182186

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetSystemTimeAsFileTime GetCommandLineA HeapReAlloc SetStdHandle GetFileType TerminateProcess ExitThread CreateThread HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA IsBadWritePtr GetTimeZoneInformation SetHandleCount GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings GetSystemInfo GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler GetLocaleInfoW SetEnvironmentVariableA VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetDiskFreeSpaceA GetTempFileNameA LocalLock LocalUnlock SetErrorMode GetCurrentDirectoryA GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SystemTimeToFileTime FileTimeToSystemTime GetOEMCP GetCPInfo TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException GetShortPathNameA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA InterlockedDecrement GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW GetModuleHandleA GetProcAddress SetLastError CopyFileA MulDiv GlobalSize GlobalAlloc FormatMessageA LocalFree GlobalLock GlobalUnlock GlobalFree FreeResource LoadResource LockResource SizeofResource FindResourceA lstrcpynA GetLastError DeleteFileA ExitProcess lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA FreeEnvironmentStringsW InterlockedExchange

user32

LockWindowUpdate SetCapture GetSystemMenu SetParent LoadCursorA GetDialogBaseUnits InflateRect DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetMessageA TranslateMessage ValidateRect ShowOwnedPopups SetCursor PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA MapVirtualKeyA GetKeyNameTextA ReleaseDC GetDC wsprintfA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus GetDCEx GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu PostMessageA AdjustWindowRectEx RegisterWindowMessageA CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow SendMessageA InvalidateRect GetClientRect DrawFocusRect DrawStateA LoadBitmapA FillRect GetSysColorBrush ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect WindowFromPoint KillTimer SetTimer GetTabbedTextExtentA SetRect MessageBeep IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect PtInRect GetWindow GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount IsClipboardFormatAvailable UnionRect IsRectEmpty DestroyIcon IsChild DeleteMenu GetSysColor GetFocus CopyRect UpdateWindow GetParent LoadIconA SetMenuItemInfoA GetMenuItemInfoA AppendMenuA GetSubMenu LoadMenuA GetCursorPos EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem GetWindowLongA IsWindow RemoveMenu GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow

gdi32

SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreateCompatibleBitmap CreateFontIndirectA GetTextMetricsA GetStockObject CombineRgn GetMapMode DPtoLP StretchDIBits GetCharWidthA CreateFontA GetBkColor StartPage EndPage SetAbortProc AbortDoc EndDoc CreateCompatibleDC CreatePatternBrush CreateDIBPatternBrushPt DeleteDC ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx GetPixel SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible SetRectRgn GetBitmapDimensionEx BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC PatBlt CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateDCA CopyMetaFileA GetDeviceCaps GetTextExtentPoint32A CreateRectRgnIndirect StartDocA

comdlg32

PageSetupDlgA FindTextA ReplaceTextA GetOpenFileNameA CommDlgExtendedError PrintDlgA GetFileTitleA GetSaveFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

SetFileSecurityA RegSetValueA RegOpenKeyA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegQueryValueA GetFileSecurityA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA Shell_NotifyIconA

comctl32

ImageList_Draw ord17 ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge ImageList_GetImageInfo

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

WriteClassStg OleRegGetUserType SetConvertStg CoTaskMemFree ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString WriteFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

544KB

Virtual Size

540KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

88KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

148KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ