9dbe1dc9cf3e8e8f79ffb4691318ca7b

Sharing

Copy URL Twitter E-mail

General

Target
9dbe1dc9cf3e8e8f79ffb4691318ca7b
Size 626KB
Sample220422-sae5msdbc8
SHA256 4d6628437efb92cc85a1eaac5e7e863efc7e23cd52311b197deb13c9adfeb5a2
MD5 9dbe1dc9cf3e8e8f79ffb4691318ca7b
SHA1 2ae843f062eaf05ad4572271ae2a998f8c40a171
SHA512 f0b77f3f9c2cf7f83b280fd08b8ad8202aaca770464ba1aba06684315bd5fdce14fd1683d3ce5e593efa864562f8bf009c4a71eacc4d0483fc8877814367178e
SSDEEP 12288:C1FIcocJwMTHzXO7N25BHiyzskF1CubVnmn:tco9MTHzXO7NQ/115mn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9dbe1dc9cf3e8e8f79ffb4691318ca7b

.dll 626KB

9dbe1dc9cf3e8e8f79ffb4691318ca7b

IMPHASH 6ba79cbed2acbe9b8ecc8e14a572f100
SHA256 4d6628437efb92cc85a1eaac5e7e863efc7e23cd52311b197deb13c9adfeb5a2
MD5 9dbe1dc9cf3e8e8f79ffb4691318ca7b
SHA1 2ae843f062eaf05ad4572271ae2a998f8c40a171
SHA512 f0b77f3f9c2cf7f83b280fd08b8ad8202aaca770464ba1aba06684315bd5fdce14fd1683d3ce5e593efa864562f8bf009c4a71eacc4d0483fc8877814367178e
SSDEEP 12288:C1FIcocJwMTHzXO7N25BHiyzskF1CubVnmn:tco9MTHzXO7NQ/115mn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

178544

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTickCount HeapFree HeapAlloc VirtualProtect GetSystemInfo VirtualQuery HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap RtlLookupFunctionEntry RtlUnwindEx ExitProcess RaiseException RtlPcToFileHeader HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapSetInformation HeapCreate HeapDestroy GetStdHandle FlsGetValue FlsFree FlsAlloc GetFileTime SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA FileTimeToLocalFileTime GetOEMCP GetCPInfo FileTimeToSystemTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc TlsGetValue LocalAlloc WritePrivateProfileStringA GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MulDiv GlobalUnlock CloseHandle FreeResource GlobalFree GlobalAddAtomA GetCurrentProcessId SetLastError GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress LockResource VirtualAlloc SizeofResource LoadResource FindResourceA GetVersion CompareStringA GetLastError MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA Sleep

user32

CopyAcceleratorTableA IsRectEmpty InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu CreateWindowExA CharNextA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect GetWindowPlacement GetWindowRect SystemParametersInfoA DestroyMenu CopyRect UnhookWindowsHookEx EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GetWindowTextA SetFocus GetMenuItemID GetMenuItemCount GetSubMenu GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog CharUpperA EnableWindow GetSystemMetrics SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect GetWindow SetWindowContextHelpId MapDialogRect ReleaseCapture SetCapture LoadCursorA GetSysColorBrush GetClassInfoExA AppendMenuA PeekMessageA MessageBoxA SendMessageA GetClientRect DrawIcon LoadIconA IsIconic PostQuitMessage GetSystemMenu GetSysColor TabbedTextOutA SetRect DrawTextExA GrayStringA DrawTextA FillRect CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps PostMessageA SetCursor IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId SetWindowPos

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject CreateRectRgnIndirect GetBkColor GetTextColor GetRgnBox GetMapMode SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject GetWindowExtEx GetViewportExtEx GetObjectA TextOutA DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC GetDeviceCaps CreateBitmap BitBlt CreateCompatibleDC CreateCompatibleBitmap PtVisible Escape RectVisible ExtTextOutA CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString

AXzdozgUWyB AYPMgiIKGvwRZCBecChr AeirHZ AgcSGT AgpSnXXdWieVVsVgYhysuEPh AiTZlZjfbujI AmnuouuymAlH BAlVJZTlYQFXwwDJ BBwDKUmURRpQWbEgDHVSoXLIG BCHYkv BJPZIcYPeltHvz BhnwXpzBOsgU BiFbolmLGZBRl CDWJWoVaVWKM CEBMNbcJfvFOQDIvthhZgUuJAk CiYCkYydFbvlXH CxplOrRE DDdVbebANOSGosoGNSA DDonokEQuBdDuvkCdMAOXVO DEzVZVUavuZB DGxLsNyhshkyFiObkEZQnsDJIR DNOGlTvNwQVoIuYmU DPCSsEUGEdjMwacBvzyClgIA DhUHOAQcYSoMEwHPcb DkXNxRksmpheAw DllRegisterServer DukOwZhnUGY EOUkGlk EXegcKP EdAxQLtlhIxq EgcXNMRMjdtqTBURzfcLFa EkVsJyzt EpOzbGyIo FGbFCpjsw FIkaRivg FOikgHvRsoUBReVCbnGeyzXjv FSSdsqW FmWScbjwHWzPnbeAyOAym FpwNUfwyVXgBhDgUXN FqIgivlTBPnWMCZIB GPKJOfhQfXsrlwrUL GkgZtNopIfCW HCmMZsACdZylppWpebMHcCSww HFDsTT HLpybgiztgtxbOFx HczGFODuoZGtH IHtEYKxO IWpGGF IWtRdDPZXEoaOf IxLWXtdZIzgrlxyuEd JCiFvETHkInSb JKRVed JUpEnxFuPkKUQUmaBuIva JaQOEEwHgeHpSrUaHEoL JzuJLXTmmOlQdJsxDEFslJgmiZ KKtlRFvVfxZo KQSWzL KnTEnRQkSQovC KqHCrOBGDJXAESAtWGm LBTwmHqNWnNDofOxW LTNDHr LrDVRBSrmzMyNmuJCaZv LykghWhbImHO MWgWdPl MXUzGBJ MYCpZGpnNoMebvNUlEjnxYbWo MYoGqhWceal MyBGZLEtLTqXa NPJOrDGQKo NeemOPLHQastve NhZirTrkha NvfVmVYjhmUXNz OLukEPdCtcXQYKyhSZrwKTeO OTVotxoOQGQjMRKJndAPlWEuDZ OZHlxFCJpLsPWTvIJjODx OdOOXZHO PGgAzdlirCjJWzTxJHcARG PJCKOJsH PSUxdxMpbUAkZF PZiDlKCQAwGTgfVHPGX PgEcumQooyDIBNheqS QUTdWTuJN QqwxwyxYZSkKKUKyJHDAGx RMQBMWPLMcXpbYURUGLgDSlKte RgjGYpyLQjFPQoWldJbYcoKCpA SKnRwRgOPnDjLwx SLCbVDSDfoSGiGijRTheLVBwB SevFkMfxVm SfATHGtZYWrXLWTncZqfB SqqrfhbFExJXlGZqhHDAHuxQAM SzvGBXCiQGrexcDxiis THTvNLDzBGFZvTIwO TXtqJZoDSo TltwAlSPLXMvN TzpZbinfMrcBDlh UFCdNNVpmsOOUEvBioAxTuMQX UOTSMdwYBotRjCVQAdLWjQsgZ UOYupyWcGdgBcBGlSR UPzgPscvR UakDmsCsjrScTdQE UgtGkgOCZMZUsvwwoaFwuc UoJKRBSycVqqgyel UzVUjowZBMR UzgeNEUnrvfnQVD VQQUzIZ VQkPCVM VZdYpriEiGaQoWfb VhvZAeuDUBYKtqoHdRqjgSi ViUTTud VkskjhAZvtECFb VllUYzJ VoWDoIdY WCTkaTTAEjcVESnTgExR WDXMPWUyaiDjtVnnoevgzb WmDbiEOP WuuapPxz WzZTEnhyASuoejaFzYm XEtZQiVdogADGgViAsBhQZXIxh XdcUHwdGKsEgEutoBeQMhW XlxGcCEhXAXdjjvgUozKOnuQxV XmsURKQxzaPZiiIK XvifqChwKyWzbgPNBxgDY YCVUcEZbkWNqtWzFKY YKitsGfW YPByRl YRQvhpmlQghOQzAOBfERvLfB YanaPzK YbpxPgB YsxElcsh ZWVtJDGYMgUkSwuPMZGp ZkQvepTqBFzcnXDLrI ZkdeDCfG ZnlJGoPEVXkEGTDwN ZtPmJLdLuvIeypYqxQY aIXlZepsTaWwTxV albyMPwqhtMxJevQZj bKcwUHqaqTBIFWmLjsdiVYcl bLEmxPSCAiNDJFZExMTliQLPc bSlfxPyxPqaKsxWgch bXgKqxs bhjnqLZzks bspIbqrrNRnRyFNBFPCncGyU cXVYPzwANglwWhMrFGjavSCnV cXvMOyNOyRxyWSZQyYaFb cvXfosHrvi dERHNszQSPXWfvDRSpw dOmMFILpLpa dXxvXoxqFjFv dZFusl dZutSyTeUgZzCuzv dcuQjLZCJZtcHFXkJsgawqhY doaUtuAeYzPO dqCsyjXUVEcpniyWvFcJBsbVvB dzjyGqwSrcqSpkOK eGlcwtWbLpoDCZzheuutOlawL ecQnYpPRSykO enpojtyV flxlCOpCX fowesSySYMaoRlmnifSeQG fwSPFBsWZybnT gLzcfbKykaq ggTSqpVmaRELU goBSPovQANWGBkjjPGsFTOzdJw hDAQmgoOGU hIYqaIQaCrMwbsRjS hUpIIxGJMpmfVrWJls hZJOjnnjHu hmdRbvbOD hoWzorQhvdlvfYzcvuozkhiPhu hogIhDoiWdCjZC hsFfeBMIbbp iCLEDntfebXhFBdpxhGfj iShSkmeZQYUZZsQehoeKPlC iUgnhHySAhDNbpPxZIHfmEMRWB inlkABqaJbNYyAfiLEPRcTh ioJpYddUi jBwNAPVBeBzOHQhA jlvMiVlZzJjdLpiiZABfiKWt kGMQNnVaFkFdZ kIKZbGBHboSH kUXNzsgwgIBQdUykZPPXyEuUF kjqeXwfBXmRkPpgosyv lNSprMZgClAuEKCrrhyNkYulIp lPhcdbtzrkhouguFwsr lPjkjTky lqmtayRW mCIvMlxmU mIkKVVHNq mNwBMEgiVwKITtmmREvdwV mWzenYEBcCubksXy miGgTArlgteFSWIQMo mvcjwlRCPFVNEHopmp nLthAJz nbYjEbJVMqYYvZLARU npdaVMUMYxDb ntbzIPLOFNMuqBpHyv oEimjppvQUzFnuPyfSu oJIWGQraIfDXhQDT oSJZvjTDOlIZWVR ogakDFaVbN oquOoDbHPtsYdsxsbUGtSHU pFhyUfkY pGsPLQpwSe qFzCGtUt qMBylMpAzQdKipvlzRaNkZ qVSeIuzCiUBo qnGBxbcAUuhwmNJCCATiRQ sMNjguZEgNdbq sMonfBoInVasVydQH sQOnCGdf sRwzpy sXjdQFTmHSyqDyoqoOfVxYD shkyxeNjQUYPOnBsgNTCKfyY tFzJxjOhUHzqKSUOgiMwDikVX tGGqCwHOaEWx tMdWvDbEWlpkZib tWGOaWsoxZTt tuJzbijWNziDyKMQ uCOtEPFfNTAoMPbMesJRSSy uPLQWrggvl uRhBslKeizf uXpzJnlZZfIgmLqLvUmNklOoE uaGsWZwKJU uzNBqsbgDKzXTNQEK vHFPqRttpedq vMGPZeTaNM vQQvsKQ vRLzKTIiqWCd vcUKgYKdcOuomsQoIhxLcD vguYOMnVsTwPPmNye vhXvGgYoWmySoYzCiWZsnH vwmVlrybkWcjSE wHPqhgbOrfYwGRcAXYpvQ wUfLkOagqnnPmf wdVbFmqUGgMqNYhMQjuxkyJNST wyQaCXgaUnYq xJFqvAQsiifTfrUu xJLPnlCmhrzJuQYDoMwm xamvAYqTEIULVQbxdlR xcmMVBHFZclRJVwErfJrr yAFoETeSAEYNMtZ yILGrACmDcohtdcVeKh yNmHwj yXMJXNxSmnHMihzLxmCxVbDrXq zCQhYJlTDAcVbOErfLokT zPQHrYFOGl zhrjgyvKeWI zilbRt zstjOlVLPkBSXytYguPArHx zsvUesMorlFRmLJgCfCo zuviscAzRxNjQ