8d0111fbd675352e54161f0bf0e372dd

Sharing

Copy URL Twitter E-mail

General

Target
8d0111fbd675352e54161f0bf0e372dd
Size 704KB
Sample220331-ve4pxafaa7
SHA256 ad7b05b40e27e1c13286ca17d2ec4116b0e1944f88e1fc2d78a03f28bed6bfb7
MD5 8d0111fbd675352e54161f0bf0e372dd
SHA1 0e20194ec6e327c3fc77ff17c97a7d09d663c3e4
SHA512 d8e84981f459bf5c3608b41d41de2a61d44c25840a5bfa2d05720927c89b84bd74a046a8ef1db47c216d743ee51bdc5477ccb7f166f5771b9168e938cb5cb697
SSDEEP 12288:y6ILjk5qGZp+8YEODBeck1xBqx9o5zIw:y6h30EOWio5T
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8d0111fbd675352e54161f0bf0e372dd

.dll 704KB

8d0111fbd675352e54161f0bf0e372dd

IMPHASH eca78e63230d87bc076c8434d67ff29f
SHA256 ad7b05b40e27e1c13286ca17d2ec4116b0e1944f88e1fc2d78a03f28bed6bfb7
MD5 8d0111fbd675352e54161f0bf0e372dd
SHA1 0e20194ec6e327c3fc77ff17c97a7d09d663c3e4
SHA512 d8e84981f459bf5c3608b41d41de2a61d44c25840a5bfa2d05720927c89b84bd74a046a8ef1db47c216d743ee51bdc5477ccb7f166f5771b9168e938cb5cb697
SSDEEP 12288:y6ILjk5qGZp+8YEODBeck1xBqx9o5zIw:y6h30EOWio5T
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

84024

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess CreateThread ExitThread RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation GetSystemTime GetLocalTime LCMapStringA LCMapStringW FatalAppExitA Sleep HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID GetVersionExA SetConsoleCtrlHandler SetStdHandle GetLocaleInfoW CompareStringA CompareStringW SetEnvironmentVariableA HeapAlloc HeapFree RtlUnwind GetProfileStringA CopyFileA GlobalSize FormatMessageA SetFileAttributesA SetFileTime SystemTimeToFileTime LocalFileTimeToFileTime GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime lstrlenW GetShortPathNameA GetStringTypeExA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DeleteFileA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle SetErrorMode GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GetLastError GetCurrentDirectoryA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GlobalFlags lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc MulDiv SetLastError MultiByteToWideChar WideCharToMultiByte InterlockedIncrement InterlockedDecrement LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA GetProcAddress lstrlenA GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CreateEventA SuspendThread SetThreadPriority ResumeThread SetEvent WaitForSingleObject CloseHandle GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FreeEnvironmentStringsA ExitProcess

user32

SetRect GetNextDlgGroupItem MessageBeep SetRectEmpty LoadAcceleratorsA TranslateAcceleratorA LoadMenuA SetMenu ReuseDDElParam UnpackDDElParam BringWindowToTop CharUpperA InflateRect RegisterClipboardFormatA RemoveMenu PostThreadMessageA DestroyIcon GetSysColor SetFocus AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos BeginDeferWindowPos CopyRect EndDeferWindowPos ScrollWindow GetScrollInfo SetScrollInfo ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID TrackPopupMenu SetWindowPlacement GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA CopyAcceleratorTableA GetMessagePos GetClassNameA SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow IsWindow GetSystemMetrics InsertMenuA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA EnableWindow LoadIconA SendMessageA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA GetCursorPos SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor ShowOwnedPopups PostQuitMessage PostMessageA GetClientRect GetWindowRect CharNextA GetDialogBaseUnits GetSysColorBrush GetMenuStringA GetMessageTime DeleteMenu InvalidateRect GetSystemMenu IsWindowUnicode AppendMenuA WindowFromPoint GetWindowThreadProcessId GetDesktopWindow WaitMessage ReleaseCapture SetCapture LoadCursorA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen DestroyMenu LoadStringA OemToCharA CharToOemA wvsprintfA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA ScrollWindowEx IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA MapWindowPoints CheckRadioButton CheckDlgButton CreateDialogIndirectParamA PtInRect UpdateWindow GetForegroundWindow SendDlgItemMessageA GetDlgItemInt

gdi32

SetROP2 SetStretchBltMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx SelectClipRgn ExcludeClipRect IntersectClipRect OffsetClipRgn MoveToEx LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags GetCurrentPositionEx ArcTo SetArcDirection PolyDraw PolylineTo SetColorAdjustment PolyBezierTo DeleteObject GetClipRgn CreateRectRgn SelectClipPath SetPolyFillMode PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetDeviceCaps GetViewportExtEx GetWindowExtEx CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreatePatternBrush CreateDIBPatternBrushPt PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextExtentPoint32A GetTextMetricsA CreateFontIndirectA GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt SetRectRgn CombineRgn CreateRectRgnIndirect CopyMetaFileA CreateDCA SetBkMode SelectPalette GetStockObject SelectObject RestoreDC SaveDC StartDocA DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx ExtSelectClipRgn CreateDIBitmap GetTextExtentPointA BitBlt CreateCompatibleDC CreateBitmap

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegDeleteKeyA RegCreateKeyA RegEnumKeyA RegQueryValueA RegSetValueA RegOpenKeyA RegCloseKey RegDeleteValueA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA

shell32

SHGetFileInfoA DragQueryFileA DragFinish DragAcceptFiles ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

CoTreatAsClass StringFromCLSID ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CreateBindCtx OleDuplicateData CoFreeUnusedLibraries ReleaseStgMedium OleInitialize CoDisconnectObject OleRun CoCreateInstance CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleFlushClipboard OleIsCurrentClipboard CreateStreamOnHGlobal OleUninitialize

olepro32

ord253

oleaut32

VariantClear SysFreeString VariantTimeToSystemTime VariantCopy VariantChangeType SysReAllocStringLen SysAllocString SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim SysAllocStringByteLen SysStringByteLen VarCyFromStr VarBstrFromCy VarDateFromStr VarBstrFromDate SafeArrayCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor SysStringLen LoadTypeLi SysAllocStringLen

Name

.text

Size

400KB

Virtual Size

397KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

56KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

180KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ