6aa79dfed5a72228f8d161ad949aafbc

Sharing

Copy URL Twitter E-mail

General

Target
6aa79dfed5a72228f8d161ad949aafbc
Size 576KB
Sample220329-m99kmshdap
SHA256 5c03d2a0f7e85ae44d1690b68d849c331cf1e43435db79010638b49f3c39c01e
MD5 6aa79dfed5a72228f8d161ad949aafbc
SHA1 b2e862ae81061c2d93abc1e69a4ab69d61bf486b
SHA512 de2c11bc6d76ba5d62d9381df32f468275df29f414447397e96421ff10ec15f7b6025d92696b15d59468c0c954fcf290622c4c3f764a0d89bca207d26d957d0c
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

6aa79dfed5a72228f8d161ad949aafbc

.dll 576KB

6aa79dfed5a72228f8d161ad949aafbc

IMPHASH 58f3725daae21f0d8f5fcbb61948a126
SHA256 5c03d2a0f7e85ae44d1690b68d849c331cf1e43435db79010638b49f3c39c01e
MD5 6aa79dfed5a72228f8d161ad949aafbc
SHA1 b2e862ae81061c2d93abc1e69a4ab69d61bf486b
SHA512 de2c11bc6d76ba5d62d9381df32f468275df29f414447397e96421ff10ec15f7b6025d92696b15d59468c0c954fcf290622c4c3f764a0d89bca207d26d957d0c
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

164854

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap RtlUnwind HeapReAlloc RaiseException HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapDestroy HeapCreate VirtualFree GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW GetCommandLineA GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA HeapAlloc HeapFree GetTickCount FileTimeToLocalFileTime GetFileTime GetFileAttributesW FileTimeToSystemTime lstrlenA CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc WritePrivateProfileStringW GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalGetAtomNameW GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA FormatMessageW LocalFree InterlockedDecrement MulDiv GetModuleHandleA lstrlenW GlobalUnlock CloseHandle FreeResource GlobalFree GlobalAddAtomW GetCurrentProcessId GetLastError SetLastError GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW WideCharToMultiByte CompareStringA MultiByteToWideChar InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress LockResource SizeofResource LoadResource FindResourceW SetHandleCount ExitProcess

user32

CharUpperW CharNextW CopyAcceleratorTableW IsRectEmpty SetRect InvalidateRgn GetNextDlgGroupItem MessageBeep FindWindowW RegisterClipboardFormatW PostThreadMessageW ReleaseCapture LoadAcceleratorsW InsertMenuItemW CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorW InvalidateRect ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu SetScrollPos GetScrollPos SetForegroundWindow UpdateWindow GetMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW IntersectRect SystemParametersInfoA GetWindowPlacement SystemParametersInfoW DestroyMenu GetMenuItemInfoW InflateRect CopyRect GetMenuItemID GetMenuItemCount GetSubMenu UnhookWindowsHookEx GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect GetWindow GetSysColorBrush LoadCursorW DestroyCursor SetCursorPos UnpackDDElParam ReuseDDElParam LoadMenuW SetWindowContextHelpId MapDialogRect SetWindowPos GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW ShowOwnedPopups SetCursor PostMessageW PostQuitMessage SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem SetCapture GetFocus GetParent OffsetRect RedrawWindow GetSystemMenu GetWindowRect IsIconic DrawIcon GetClientRect LoadIconW AppendMenuW GetSystemMetrics SendMessageW EnableWindow DeferWindowPos UnregisterClassA

gdi32

CreatePatternBrush SelectObject CreateCompatibleDC GetStockObject GetDeviceCaps CreateSolidBrush CreateFontIndirectW GetTextExtentPoint32W CreateCompatibleBitmap DeleteDC GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode Escape ExtTextOutW TextOutW RectVisible PtVisible ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx PatBlt CreateBitmap GetPixel BitBlt GetWindowExtEx GetViewportExtEx GetObjectW DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC SetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

shell32

DragQueryFileW DragFinish

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect VariantInit VariantChangeType VariantClear SysStringLen SysAllocStringLen SysFreeString