xcah1[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
xcah1.dll
Size 432KB
Sample220401-xn68habhek
SHA256 963002f0b72426ae5eb3db9ebef095c6525a3143d336f665aea47e05fa22b5e1
MD5 f9b64b4faf4d7563809c55665120426a
SHA1 a54f1d8f7c60418a637b4c9e01f8b1fc0ed1b435
SHA512 2ae34776401bf821a4e2ff1c263f8fed1dbd9f31920a55f2d163d8914c712c81add28229a85d80fb70419130a23e427e233fd2102548ebf1369d7c8f1f5f14c8
SSDEEP 6144:fXsg4N8g8NZrrED8R+7pARpzKDvS4rsjW+5YFYQ8Gv0JW84gCFff:f8g4N8RM8R+7pYpzK/rsjW+5MDvT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

xcah1.dll

.dll 432KB

xcah1.dll

IMPHASH a1307a412c459cd4896a70dba2051692
SHA256 963002f0b72426ae5eb3db9ebef095c6525a3143d336f665aea47e05fa22b5e1
MD5 f9b64b4faf4d7563809c55665120426a
SHA1 a54f1d8f7c60418a637b4c9e01f8b1fc0ed1b435
SHA512 2ae34776401bf821a4e2ff1c263f8fed1dbd9f31920a55f2d163d8914c712c81add28229a85d80fb70419130a23e427e233fd2102548ebf1369d7c8f1f5f14c8
SSDEEP 6144:fXsg4N8g8NZrrED8R+7pARpzKDvS4rsjW+5YFYQ8Gv0JW84gCFff:f8g4N8RM8R+7pYpzK/rsjW+5MDvT
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

56258

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation LCMapStringA LCMapStringW Sleep HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA HeapAlloc GetProfileStringA InterlockedExchange HeapFree RtlUnwind FormatMessageA GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GetLastError WritePrivateProfileStringA GlobalFlags lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedIncrement InterlockedDecrement LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA MulDiv GetModuleHandleA GetProcAddress SetLastError GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CloseHandle GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FreeEnvironmentStringsA ExitProcess

user32

MessageBeep InvalidateRect CharUpperA InflateRect RegisterClipboardFormatA PostThreadMessageA GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetNextDlgGroupItem GrayStringA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA EnableWindow HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode LoadIconA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor PostQuitMessage PostMessageA IsIconic GetSystemMetrics GetClientRect DrawIcon SetRect CopyAcceleratorTableA CharNextA GetWindowRect GetSysColorBrush GetSystemMenu AppendMenuA SendMessageA PtInRect GetClassNameA GetDesktopWindow LoadCursorA DestroyMenu LoadStringA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus DestroyWindow DrawTextA CopyRect AdjustWindowRectEx

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox IntersectClipRect DeleteObject SetMapMode GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetObjectA BitBlt CreateCompatibleDC GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt SetTextColor SetBkMode SetBkColor GetStockObject SelectObject RestoreDC SaveDC DeleteDC CreateDIBitmap GetTextExtentPointA CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegCloseKey RegSetValueExA RegOpenKeyExA RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard OleUninitialize

olepro32

ord253

oleaut32

SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen SysFreeString