f70dc8fd7cb7d71ab2c57cbbc0b5f67f

Sharing

Copy URL Twitter E-mail

General

Target
f70dc8fd7cb7d71ab2c57cbbc0b5f67f
Size 576KB
Sample220329-mbyeqadba6
SHA256 3c751f1b0d1f3cb4ae51350b0213afdcc841841be3acdf465195c56cf3b77bb0
MD5 f70dc8fd7cb7d71ab2c57cbbc0b5f67f
SHA1 4966bbf76021b07f1e466e89df9cc8525fdbfffb
SHA512 425653bb4af2d0730fbf2bf924a7a69b2321018c92576d631f7f486be452605c1d5a16a67b13613fda626fb0695a7c1e631bb452b558eb14440f0aa2da85f1d1
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

f70dc8fd7cb7d71ab2c57cbbc0b5f67f

.dll 576KB

f70dc8fd7cb7d71ab2c57cbbc0b5f67f

IMPHASH 58f3725daae21f0d8f5fcbb61948a126
SHA256 3c751f1b0d1f3cb4ae51350b0213afdcc841841be3acdf465195c56cf3b77bb0
MD5 f70dc8fd7cb7d71ab2c57cbbc0b5f67f
SHA1 4966bbf76021b07f1e466e89df9cc8525fdbfffb
SHA512 425653bb4af2d0730fbf2bf924a7a69b2321018c92576d631f7f486be452605c1d5a16a67b13613fda626fb0695a7c1e631bb452b558eb14440f0aa2da85f1d1
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

164854

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap RtlUnwind HeapReAlloc RaiseException HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapDestroy HeapCreate VirtualFree GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW GetCommandLineA GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA HeapAlloc HeapFree GetTickCount FileTimeToLocalFileTime GetFileTime GetFileAttributesW FileTimeToSystemTime lstrlenA CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc WritePrivateProfileStringW GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalGetAtomNameW GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA FormatMessageW LocalFree InterlockedDecrement MulDiv GetModuleHandleA lstrlenW GlobalUnlock CloseHandle FreeResource GlobalFree GlobalAddAtomW GetCurrentProcessId GetLastError SetLastError GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameW GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW WideCharToMultiByte CompareStringA MultiByteToWideChar InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress LockResource SizeofResource LoadResource FindResourceW SetHandleCount ExitProcess

user32

CharUpperW CharNextW CopyAcceleratorTableW IsRectEmpty SetRect InvalidateRgn GetNextDlgGroupItem MessageBeep FindWindowW RegisterClipboardFormatW PostThreadMessageW ReleaseCapture LoadAcceleratorsW InsertMenuItemW CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorW InvalidateRect ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu SetScrollPos GetScrollPos SetForegroundWindow UpdateWindow GetMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW IntersectRect SystemParametersInfoA GetWindowPlacement SystemParametersInfoW DestroyMenu GetMenuItemInfoW InflateRect CopyRect GetMenuItemID GetMenuItemCount GetSubMenu UnhookWindowsHookEx GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect GetWindow GetSysColorBrush LoadCursorW DestroyCursor SetCursorPos UnpackDDElParam ReuseDDElParam LoadMenuW SetWindowContextHelpId MapDialogRect SetWindowPos GetWindowThreadProcessId GetWindowLongW GetLastActivePopup IsWindowEnabled MessageBoxW ShowOwnedPopups SetCursor PostMessageW PostQuitMessage SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem SetCapture GetFocus GetParent OffsetRect RedrawWindow GetSystemMenu GetWindowRect IsIconic DrawIcon GetClientRect LoadIconW AppendMenuW GetSystemMetrics SendMessageW EnableWindow DeferWindowPos UnregisterClassA

gdi32

CreatePatternBrush SelectObject CreateCompatibleDC GetStockObject GetDeviceCaps CreateSolidBrush CreateFontIndirectW GetTextExtentPoint32W CreateCompatibleBitmap DeleteDC GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode Escape ExtTextOutW TextOutW RectVisible PtVisible ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx PatBlt CreateBitmap GetPixel BitBlt GetWindowExtEx GetViewportExtEx GetObjectW DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC SetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCloseKey

shell32

DragQueryFileW DragFinish

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect VariantInit VariantChangeType VariantClear SysStringLen SysAllocStringLen SysFreeString