xcah3[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
xcah3.dll
Size 432KB
Sample220401-xprjfabheq
SHA256 f57a63a8a2c7aa1ee5f4253218b87856d6d2986e49d9a2eeaf2bfa064bb7c0ef
MD5 dd515971b029e160e9f6b91efa32070e
SHA1 2217cf426b44814632fe40b91be60b560aa4a084
SHA512 68c72979aa523f2580b29bbc23dba85e977193b31399292bc773cef420fcf4ca9e11b77a3185b9f4a8fa122908bca030b7e6da0f8077740a06c80fc1282c73f1
SSDEEP 6144:fXsg4N8g8NZrrED8R+7pARpzKDAS4rsjW+5YFYQ8Gv0JW84gCFff:f8g4N8RM8R+7pYpzK4rsjW+5MDvT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

xcah3.dll

.dll 432KB

xcah3.dll

IMPHASH a1307a412c459cd4896a70dba2051692
SHA256 f57a63a8a2c7aa1ee5f4253218b87856d6d2986e49d9a2eeaf2bfa064bb7c0ef
MD5 dd515971b029e160e9f6b91efa32070e
SHA1 2217cf426b44814632fe40b91be60b560aa4a084
SHA512 68c72979aa523f2580b29bbc23dba85e977193b31399292bc773cef420fcf4ca9e11b77a3185b9f4a8fa122908bca030b7e6da0f8077740a06c80fc1282c73f1
SSDEEP 6144:fXsg4N8g8NZrrED8R+7pARpzKDAS4rsjW+5YFYQ8Gv0JW84gCFff:f8g4N8RM8R+7pYpzK4rsjW+5MDvT
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

56258

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation LCMapStringA LCMapStringW Sleep HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA HeapAlloc GetProfileStringA InterlockedExchange HeapFree RtlUnwind FormatMessageA GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GetLastError WritePrivateProfileStringA GlobalFlags lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedIncrement InterlockedDecrement LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA MulDiv GetModuleHandleA GetProcAddress SetLastError GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CloseHandle GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FreeEnvironmentStringsA ExitProcess

user32

MessageBeep InvalidateRect CharUpperA InflateRect RegisterClipboardFormatA PostThreadMessageA GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetNextDlgGroupItem GrayStringA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA EnableWindow HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode LoadIconA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor PostQuitMessage PostMessageA IsIconic GetSystemMetrics GetClientRect DrawIcon SetRect CopyAcceleratorTableA CharNextA GetWindowRect GetSysColorBrush GetSystemMenu AppendMenuA SendMessageA PtInRect GetClassNameA GetDesktopWindow LoadCursorA DestroyMenu LoadStringA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus DestroyWindow DrawTextA CopyRect AdjustWindowRectEx

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox IntersectClipRect DeleteObject SetMapMode GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetObjectA BitBlt CreateCompatibleDC GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt SetTextColor SetBkMode SetBkColor GetStockObject SelectObject RestoreDC SaveDC DeleteDC CreateDIBitmap GetTextExtentPointA CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegCloseKey RegSetValueExA RegOpenKeyExA RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard OleUninitialize

olepro32

ord253

oleaut32

SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen SysFreeString