332a2ef65b891172b7805555633aaedc

Sharing

Copy URL Twitter E-mail

General

Target
332a2ef65b891172b7805555633aaedc
Size 626KB
Sample220422-sf6vjsdbh3
SHA256 294836a728846c0e2e6e49bf001e4b0d605fa1db9626cf15d1fdc9ef4ff1fb23
MD5 332a2ef65b891172b7805555633aaedc
SHA1 023a7f6dddc4d8bc3968b115005565312bea16cc
SHA512 0da9992ea21f0eba952dc5eedd1bbde4d3eea461b1ed4ca1d0e2584400c901ea61e97ff675817069a88a78748b5b677b3b32c7898c85b9df057e13fc06f9075c
SSDEEP 12288:C1FIcocJwMTHzXO7N2lBHiyzskF1CubVnmn:tco9MTHzXO7N0/115mn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

332a2ef65b891172b7805555633aaedc

.dll 626KB

332a2ef65b891172b7805555633aaedc

IMPHASH 6ba79cbed2acbe9b8ecc8e14a572f100
SHA256 294836a728846c0e2e6e49bf001e4b0d605fa1db9626cf15d1fdc9ef4ff1fb23
MD5 332a2ef65b891172b7805555633aaedc
SHA1 023a7f6dddc4d8bc3968b115005565312bea16cc
SHA512 0da9992ea21f0eba952dc5eedd1bbde4d3eea461b1ed4ca1d0e2584400c901ea61e97ff675817069a88a78748b5b677b3b32c7898c85b9df057e13fc06f9075c
SSDEEP 12288:C1FIcocJwMTHzXO7N2lBHiyzskF1CubVnmn:tco9MTHzXO7N0/115mn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

178544

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTickCount HeapFree HeapAlloc VirtualProtect GetSystemInfo VirtualQuery HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap RtlLookupFunctionEntry RtlUnwindEx ExitProcess RaiseException RtlPcToFileHeader HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapSetInformation HeapCreate HeapDestroy GetStdHandle FlsGetValue FlsFree FlsAlloc GetFileTime SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA FileTimeToLocalFileTime GetOEMCP GetCPInfo FileTimeToSystemTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc TlsGetValue LocalAlloc WritePrivateProfileStringA GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MulDiv GlobalUnlock CloseHandle FreeResource GlobalFree GlobalAddAtomA GetCurrentProcessId SetLastError GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress LockResource VirtualAlloc SizeofResource LoadResource FindResourceA GetVersion CompareStringA GetLastError MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA Sleep

user32

CopyAcceleratorTableA IsRectEmpty InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu CreateWindowExA CharNextA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect GetWindowPlacement GetWindowRect SystemParametersInfoA DestroyMenu CopyRect UnhookWindowsHookEx EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GetWindowTextA SetFocus GetMenuItemID GetMenuItemCount GetSubMenu GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog CharUpperA EnableWindow GetSystemMetrics SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect GetWindow SetWindowContextHelpId MapDialogRect ReleaseCapture SetCapture LoadCursorA GetSysColorBrush GetClassInfoExA AppendMenuA PeekMessageA MessageBoxA SendMessageA GetClientRect DrawIcon LoadIconA IsIconic PostQuitMessage GetSystemMenu GetSysColor TabbedTextOutA SetRect DrawTextExA GrayStringA DrawTextA FillRect CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps PostMessageA SetCursor IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId SetWindowPos

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject CreateRectRgnIndirect GetBkColor GetTextColor GetRgnBox GetMapMode SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject GetWindowExtEx GetViewportExtEx GetObjectA TextOutA DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC GetDeviceCaps CreateBitmap BitBlt CreateCompatibleDC CreateCompatibleBitmap PtVisible Escape RectVisible ExtTextOutA CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString

AXzdozgUWyB AYPMgiIKGvwRZCBecChr AeirHZ AgcSGT AgpSnXXdWieVVsVgYhysuEPh AiTZlZjfbujI AmnuouuymAlH BAlVJZTlYQFXwwDJ BBwDKUmURRpQWbEgDHVSoXLIG BCHYkv BJPZIcYPeltHvz BhnwXpzBOsgU BiFbolmLGZBRl CDWJWoVaVWKM CEBMNbcJfvFOQDIvthhZgUuJAk CiYCkYydFbvlXH CxplOrRE DDdVbebANOSGosoGNSA DDonokEQuBdDuvkCdMAOXVO DEzVZVUavuZB DGxLsNyhshkyFiObkEZQnsDJIR DNOGlTvNwQVoIuYmU DPCSsEUGEdjMwacBvzyClgIA DhUHOAQcYSoMEwHPcb DkXNxRksmpheAw DllRegisterServer DukOwZhnUGY EOUkGlk EXegcKP EdAxQLtlhIxq EgcXNMRMjdtqTBURzfcLFa EkVsJyzt EpOzbGyIo FGbFCpjsw FIkaRivg FOikgHvRsoUBReVCbnGeyzXjv FSSdsqW FmWScbjwHWzPnbeAyOAym FpwNUfwyVXgBhDgUXN FqIgivlTBPnWMCZIB GPKJOfhQfXsrlwrUL GkgZtNopIfCW HCmMZsACdZylppWpebMHcCSww HFDsTT HLpybgiztgtxbOFx HczGFODuoZGtH IHtEYKxO IWpGGF IWtRdDPZXEoaOf IxLWXtdZIzgrlxyuEd JCiFvETHkInSb JKRVed JUpEnxFuPkKUQUmaBuIva JaQOEEwHgeHpSrUaHEoL JzuJLXTmmOlQdJsxDEFslJgmiZ KKtlRFvVfxZo KQSWzL KnTEnRQkSQovC KqHCrOBGDJXAESAtWGm LBTwmHqNWnNDofOxW LTNDHr LrDVRBSrmzMyNmuJCaZv LykghWhbImHO MWgWdPl MXUzGBJ MYCpZGpnNoMebvNUlEjnxYbWo MYoGqhWceal MyBGZLEtLTqXa NPJOrDGQKo NeemOPLHQastve NhZirTrkha NvfVmVYjhmUXNz OLukEPdCtcXQYKyhSZrwKTeO OTVotxoOQGQjMRKJndAPlWEuDZ OZHlxFCJpLsPWTvIJjODx OdOOXZHO PGgAzdlirCjJWzTxJHcARG PJCKOJsH PSUxdxMpbUAkZF PZiDlKCQAwGTgfVHPGX PgEcumQooyDIBNheqS QUTdWTuJN QqwxwyxYZSkKKUKyJHDAGx RMQBMWPLMcXpbYURUGLgDSlKte RgjGYpyLQjFPQoWldJbYcoKCpA SKnRwRgOPnDjLwx SLCbVDSDfoSGiGijRTheLVBwB SevFkMfxVm SfATHGtZYWrXLWTncZqfB SqqrfhbFExJXlGZqhHDAHuxQAM SzvGBXCiQGrexcDxiis THTvNLDzBGFZvTIwO TXtqJZoDSo TltwAlSPLXMvN TzpZbinfMrcBDlh UFCdNNVpmsOOUEvBioAxTuMQX UOTSMdwYBotRjCVQAdLWjQsgZ UOYupyWcGdgBcBGlSR UPzgPscvR UakDmsCsjrScTdQE UgtGkgOCZMZUsvwwoaFwuc UoJKRBSycVqqgyel UzVUjowZBMR UzgeNEUnrvfnQVD VQQUzIZ VQkPCVM VZdYpriEiGaQoWfb VhvZAeuDUBYKtqoHdRqjgSi ViUTTud VkskjhAZvtECFb VllUYzJ VoWDoIdY WCTkaTTAEjcVESnTgExR WDXMPWUyaiDjtVnnoevgzb WmDbiEOP WuuapPxz WzZTEnhyASuoejaFzYm XEtZQiVdogADGgViAsBhQZXIxh XdcUHwdGKsEgEutoBeQMhW XlxGcCEhXAXdjjvgUozKOnuQxV XmsURKQxzaPZiiIK XvifqChwKyWzbgPNBxgDY YCVUcEZbkWNqtWzFKY YKitsGfW YPByRl YRQvhpmlQghOQzAOBfERvLfB YanaPzK YbpxPgB YsxElcsh ZWVtJDGYMgUkSwuPMZGp ZkQvepTqBFzcnXDLrI ZkdeDCfG ZnlJGoPEVXkEGTDwN ZtPmJLdLuvIeypYqxQY aIXlZepsTaWwTxV albyMPwqhtMxJevQZj bKcwUHqaqTBIFWmLjsdiVYcl bLEmxPSCAiNDJFZExMTliQLPc bSlfxPyxPqaKsxWgch bXgKqxs bhjnqLZzks bspIbqrrNRnRyFNBFPCncGyU cXVYPzwANglwWhMrFGjavSCnV cXvMOyNOyRxyWSZQyYaFb cvXfosHrvi dERHNszQSPXWfvDRSpw dOmMFILpLpa dXxvXoxqFjFv dZFusl dZutSyTeUgZzCuzv dcuQjLZCJZtcHFXkJsgawqhY doaUtuAeYzPO dqCsyjXUVEcpniyWvFcJBsbVvB dzjyGqwSrcqSpkOK eGlcwtWbLpoDCZzheuutOlawL ecQnYpPRSykO enpojtyV flxlCOpCX fowesSySYMaoRlmnifSeQG fwSPFBsWZybnT gLzcfbKykaq ggTSqpVmaRELU goBSPovQANWGBkjjPGsFTOzdJw hDAQmgoOGU hIYqaIQaCrMwbsRjS hUpIIxGJMpmfVrWJls hZJOjnnjHu hmdRbvbOD hoWzorQhvdlvfYzcvuozkhiPhu hogIhDoiWdCjZC hsFfeBMIbbp iCLEDntfebXhFBdpxhGfj iShSkmeZQYUZZsQehoeKPlC iUgnhHySAhDNbpPxZIHfmEMRWB inlkABqaJbNYyAfiLEPRcTh ioJpYddUi jBwNAPVBeBzOHQhA jlvMiVlZzJjdLpiiZABfiKWt kGMQNnVaFkFdZ kIKZbGBHboSH kUXNzsgwgIBQdUykZPPXyEuUF kjqeXwfBXmRkPpgosyv lNSprMZgClAuEKCrrhyNkYulIp lPhcdbtzrkhouguFwsr lPjkjTky lqmtayRW mCIvMlxmU mIkKVVHNq mNwBMEgiVwKITtmmREvdwV mWzenYEBcCubksXy miGgTArlgteFSWIQMo mvcjwlRCPFVNEHopmp nLthAJz nbYjEbJVMqYYvZLARU npdaVMUMYxDb ntbzIPLOFNMuqBpHyv oEimjppvQUzFnuPyfSu oJIWGQraIfDXhQDT oSJZvjTDOlIZWVR ogakDFaVbN oquOoDbHPtsYdsxsbUGtSHU pFhyUfkY pGsPLQpwSe qFzCGtUt qMBylMpAzQdKipvlzRaNkZ qVSeIuzCiUBo qnGBxbcAUuhwmNJCCATiRQ sMNjguZEgNdbq sMonfBoInVasVydQH sQOnCGdf sRwzpy sXjdQFTmHSyqDyoqoOfVxYD shkyxeNjQUYPOnBsgNTCKfyY tFzJxjOhUHzqKSUOgiMwDikVX tGGqCwHOaEWx tMdWvDbEWlpkZib tWGOaWsoxZTt tuJzbijWNziDyKMQ uCOtEPFfNTAoMPbMesJRSSy uPLQWrggvl uRhBslKeizf uXpzJnlZZfIgmLqLvUmNklOoE uaGsWZwKJU uzNBqsbgDKzXTNQEK vHFPqRttpedq vMGPZeTaNM vQQvsKQ vRLzKTIiqWCd vcUKgYKdcOuomsQoIhxLcD vguYOMnVsTwPPmNye vhXvGgYoWmySoYzCiWZsnH vwmVlrybkWcjSE wHPqhgbOrfYwGRcAXYpvQ wUfLkOagqnnPmf wdVbFmqUGgMqNYhMQjuxkyJNST wyQaCXgaUnYq xJFqvAQsiifTfrUu xJLPnlCmhrzJuQYDoMwm xamvAYqTEIULVQbxdlR xcmMVBHFZclRJVwErfJrr yAFoETeSAEYNMtZ yILGrACmDcohtdcVeKh yNmHwj yXMJXNxSmnHMihzLxmCxVbDrXq zCQhYJlTDAcVbOErfLokT zPQHrYFOGl zhrjgyvKeWI zilbRt zstjOlVLPkBSXytYguPArHx zsvUesMorlFRmLJgCfCo zuviscAzRxNjQ