61e580007a1e3a51b7095d235c777a33

Sharing

Copy URL Twitter E-mail

General

Target
61e580007a1e3a51b7095d235c777a33
Size 680KB
Sample220328-2cgwpacbam
SHA256 252fe42ab7c5c6bcfebadef19354105dfcee481d8bfa11bfb35db4184627230b
MD5 61e580007a1e3a51b7095d235c777a33
SHA1 0349f2bfb1066a9f5550cd66dea09630458822d5
SHA512 c0ac7d0b4b12957d5afd21cb2d7b541e25a8f05ac68e302737abce93f19e2d69bc86472ccbdafe846ac578dae1b46fa16178a49aca97f81e7f8fdd6d9b1dc9b9
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

61e580007a1e3a51b7095d235c777a33

.dll 680KB

61e580007a1e3a51b7095d235c777a33

IMPHASH ec3f01778b895fc65e0f7631cf3a5e17
SHA256 252fe42ab7c5c6bcfebadef19354105dfcee481d8bfa11bfb35db4184627230b
MD5 61e580007a1e3a51b7095d235c777a33
SHA1 0349f2bfb1066a9f5550cd66dea09630458822d5
SHA512 c0ac7d0b4b12957d5afd21cb2d7b541e25a8f05ac68e302737abce93f19e2d69bc86472ccbdafe846ac578dae1b46fa16178a49aca97f81e7f8fdd6d9b1dc9b9
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

211568

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFileTimeToFileTime GetTickCount HeapAlloc HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind GetCommandLineA GetProcessHeap RaiseException HeapSize VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep GetACP FileTimeToLocalFileTime LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA CreateFileA GetShortPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA SystemTimeToFileTime FileTimeToSystemTime GetOEMCP GetCPInfo TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetThreadLocale InterlockedIncrement FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary LoadLibraryA lstrcmpW GetModuleHandleA GetProcAddress GetVersionExA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv SetLastError ExitProcess GetStringTypeExA lstrlenA lstrcmpiA CompareStringW CompareStringA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar LCMapStringA InterlockedExchange

user32

GetWindowDC BeginPaint EndPaint CopyAcceleratorTableA SetRect InvalidateRgn SetCapture DestroyIcon GetNextDlgGroupItem MessageBeep SetTimer KillTimer WindowFromPoint GetDCEx LockWindowUpdate UnregisterClassA RegisterClipboardFormatA PostThreadMessageA GetSystemMenu DeleteMenu IsRectEmpty IsZoomed ReleaseDC GetDC UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA SetWindowContextHelpId MapDialogRect GetWindowThreadProcessId ShowOwnedPopups SetCursor GetMessageA TranslateMessage GetCursorPos ValidateRect PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog CharNextA IsWindowEnabled ShowWindow SetWindowTextA IsDialogMessageA GrayStringA RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow IsWindowVisible GetClientRect EnableWindow CharUpperA UpdateWindow GetMenu PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect DrawTextExA DrawTextA TabbedTextOutA FillRect GetMenuItemInfoA InflateRect LoadCursorA GetSysColorBrush ClientToScreen SetParent InvalidateRect CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA SendMessageA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID AppendMenuA GetMenuStringA GetWindow GetSystemMetrics GetWindowRect GetWindowPlacement IsIconic SystemParametersInfoA IntersectRect OffsetRect SetWindowPos SetWindowLongA GetWindowLongA CallWindowProcA DefWindowProcA GetDlgCtrlID PtInRect MoveWindow

gdi32

PtVisible RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx CreatePatternBrush CreateSolidBrush GetRgnBox SetRectRgn CombineRgn GetMapMode GetPixel GetWindowExtEx GetViewportExtEx CreateRectRgn SelectClipRgn ExtSelectClipRgn CreateBitmap IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC ExtTextOutA BitBlt CreateFontIndirectA GetTextExtentPoint32A GetTextMetricsA StretchDIBits DeleteDC CreateFontA SelectObject GetCharWidthA DeleteObject PatBlt CreateRectRgnIndirect CreateCompatibleDC CreateCompatibleBitmap GetTextColor GetBkColor GetStockObject GetObjectA SetBkColor SetTextColor GetClipBox GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

GetFileSecurityA SetFileSecurityA RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

VariantChangeType VariantInit SysAllocStringLen OleCreateFontIndirect SysStringLen SysFreeString SysAllocStringByteLen SysAllocString VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy VariantCopy VariantClear