11f441eafe65fd7654baa9eba8efa133

Sharing

Copy URL Twitter E-mail

General

Target
11f441eafe65fd7654baa9eba8efa133
Size 626KB
Sample220424-bzn1eafda2
SHA256 e9466a1c34daa59ce8db0710d58acc7e1bceaecf14dfc8a07bf2cb25bd86a4cf
MD5 11f441eafe65fd7654baa9eba8efa133
SHA1 1f9edb12ea0409b7615e2addf61293a5bdd81452
SHA512 6d95bea659112b50c35e621c06f2fea3572b031f341be53dee3de648652098e3a5ad4f67c10497ec2639c94e1714f273c073e792ff8a79038c21cb0d1123a18f
SSDEEP 12288:C1FIcocJwMTHzXO7N2mBHiyzskF1CubVnmn:tco9MTHzXO7Nf/115mn
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

11f441eafe65fd7654baa9eba8efa133

.dll 626KB

11f441eafe65fd7654baa9eba8efa133

IMPHASH 6ba79cbed2acbe9b8ecc8e14a572f100
SHA256 e9466a1c34daa59ce8db0710d58acc7e1bceaecf14dfc8a07bf2cb25bd86a4cf
MD5 11f441eafe65fd7654baa9eba8efa133
SHA1 1f9edb12ea0409b7615e2addf61293a5bdd81452
SHA512 6d95bea659112b50c35e621c06f2fea3572b031f341be53dee3de648652098e3a5ad4f67c10497ec2639c94e1714f273c073e792ff8a79038c21cb0d1123a18f
SSDEEP 12288:C1FIcocJwMTHzXO7N2mBHiyzskF1CubVnmn:tco9MTHzXO7Nf/115mn
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

178544

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTickCount HeapFree HeapAlloc VirtualProtect GetSystemInfo VirtualQuery HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap RtlLookupFunctionEntry RtlUnwindEx ExitProcess RaiseException RtlPcToFileHeader HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapSetInformation HeapCreate HeapDestroy GetStdHandle FlsGetValue FlsFree FlsAlloc GetFileTime SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetFileAttributesA FileTimeToLocalFileTime GetOEMCP GetCPInfo FileTimeToSystemTime CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc TlsGetValue LocalAlloc WritePrivateProfileStringA GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MulDiv GlobalUnlock CloseHandle FreeResource GlobalFree GlobalAddAtomA GetCurrentProcessId SetLastError GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress LockResource VirtualAlloc SizeofResource LoadResource FindResourceA GetVersion CompareStringA GetLastError MultiByteToWideChar CompareStringW WideCharToMultiByte lstrlenA Sleep

user32

CopyAcceleratorTableA IsRectEmpty InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu CreateWindowExA CharNextA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect GetWindowPlacement GetWindowRect SystemParametersInfoA DestroyMenu CopyRect UnhookWindowsHookEx EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GetWindowTextA SetFocus GetMenuItemID GetMenuItemCount GetSubMenu GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog CharUpperA EnableWindow GetSystemMetrics SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect GetWindow SetWindowContextHelpId MapDialogRect ReleaseCapture SetCapture LoadCursorA GetSysColorBrush GetClassInfoExA AppendMenuA PeekMessageA MessageBoxA SendMessageA GetClientRect DrawIcon LoadIconA IsIconic PostQuitMessage GetSystemMenu GetSysColor TabbedTextOutA SetRect DrawTextExA GrayStringA DrawTextA FillRect CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps PostMessageA SetCursor IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId SetWindowPos

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject CreateRectRgnIndirect GetBkColor GetTextColor GetRgnBox GetMapMode SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject GetWindowExtEx GetViewportExtEx GetObjectA TextOutA DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC GetDeviceCaps CreateBitmap BitBlt CreateCompatibleDC CreateCompatibleBitmap PtVisible Escape RectVisible ExtTextOutA CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoRevokeClassObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysAllocStringLen SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString

AXzdozgUWyB AYPMgiIKGvwRZCBecChr AeirHZ AgcSGT AgpSnXXdWieVVsVgYhysuEPh AiTZlZjfbujI AmnuouuymAlH BAlVJZTlYQFXwwDJ BBwDKUmURRpQWbEgDHVSoXLIG BCHYkv BJPZIcYPeltHvz BhnwXpzBOsgU BiFbolmLGZBRl CDWJWoVaVWKM CEBMNbcJfvFOQDIvthhZgUuJAk CiYCkYydFbvlXH CxplOrRE DDdVbebANOSGosoGNSA DDonokEQuBdDuvkCdMAOXVO DEzVZVUavuZB DGxLsNyhshkyFiObkEZQnsDJIR DNOGlTvNwQVoIuYmU DPCSsEUGEdjMwacBvzyClgIA DhUHOAQcYSoMEwHPcb DkXNxRksmpheAw DllRegisterServer DukOwZhnUGY EOUkGlk EXegcKP EdAxQLtlhIxq EgcXNMRMjdtqTBURzfcLFa EkVsJyzt EpOzbGyIo FGbFCpjsw FIkaRivg FOikgHvRsoUBReVCbnGeyzXjv FSSdsqW FmWScbjwHWzPnbeAyOAym FpwNUfwyVXgBhDgUXN FqIgivlTBPnWMCZIB GPKJOfhQfXsrlwrUL GkgZtNopIfCW HCmMZsACdZylppWpebMHcCSww HFDsTT HLpybgiztgtxbOFx HczGFODuoZGtH IHtEYKxO IWpGGF IWtRdDPZXEoaOf IxLWXtdZIzgrlxyuEd JCiFvETHkInSb JKRVed JUpEnxFuPkKUQUmaBuIva JaQOEEwHgeHpSrUaHEoL JzuJLXTmmOlQdJsxDEFslJgmiZ KKtlRFvVfxZo KQSWzL KnTEnRQkSQovC KqHCrOBGDJXAESAtWGm LBTwmHqNWnNDofOxW LTNDHr LrDVRBSrmzMyNmuJCaZv LykghWhbImHO MWgWdPl MXUzGBJ MYCpZGpnNoMebvNUlEjnxYbWo MYoGqhWceal MyBGZLEtLTqXa NPJOrDGQKo NeemOPLHQastve NhZirTrkha NvfVmVYjhmUXNz OLukEPdCtcXQYKyhSZrwKTeO OTVotxoOQGQjMRKJndAPlWEuDZ OZHlxFCJpLsPWTvIJjODx OdOOXZHO PGgAzdlirCjJWzTxJHcARG PJCKOJsH PSUxdxMpbUAkZF PZiDlKCQAwGTgfVHPGX PgEcumQooyDIBNheqS QUTdWTuJN QqwxwyxYZSkKKUKyJHDAGx RMQBMWPLMcXpbYURUGLgDSlKte RgjGYpyLQjFPQoWldJbYcoKCpA SKnRwRgOPnDjLwx SLCbVDSDfoSGiGijRTheLVBwB SevFkMfxVm SfATHGtZYWrXLWTncZqfB SqqrfhbFExJXlGZqhHDAHuxQAM SzvGBXCiQGrexcDxiis THTvNLDzBGFZvTIwO TXtqJZoDSo TltwAlSPLXMvN TzpZbinfMrcBDlh UFCdNNVpmsOOUEvBioAxTuMQX UOTSMdwYBotRjCVQAdLWjQsgZ UOYupyWcGdgBcBGlSR UPzgPscvR UakDmsCsjrScTdQE UgtGkgOCZMZUsvwwoaFwuc UoJKRBSycVqqgyel UzVUjowZBMR UzgeNEUnrvfnQVD VQQUzIZ VQkPCVM VZdYpriEiGaQoWfb VhvZAeuDUBYKtqoHdRqjgSi ViUTTud VkskjhAZvtECFb VllUYzJ VoWDoIdY WCTkaTTAEjcVESnTgExR WDXMPWUyaiDjtVnnoevgzb WmDbiEOP WuuapPxz WzZTEnhyASuoejaFzYm XEtZQiVdogADGgViAsBhQZXIxh XdcUHwdGKsEgEutoBeQMhW XlxGcCEhXAXdjjvgUozKOnuQxV XmsURKQxzaPZiiIK XvifqChwKyWzbgPNBxgDY YCVUcEZbkWNqtWzFKY YKitsGfW YPByRl YRQvhpmlQghOQzAOBfERvLfB YanaPzK YbpxPgB YsxElcsh ZWVtJDGYMgUkSwuPMZGp ZkQvepTqBFzcnXDLrI ZkdeDCfG ZnlJGoPEVXkEGTDwN ZtPmJLdLuvIeypYqxQY aIXlZepsTaWwTxV albyMPwqhtMxJevQZj bKcwUHqaqTBIFWmLjsdiVYcl bLEmxPSCAiNDJFZExMTliQLPc bSlfxPyxPqaKsxWgch bXgKqxs bhjnqLZzks bspIbqrrNRnRyFNBFPCncGyU cXVYPzwANglwWhMrFGjavSCnV cXvMOyNOyRxyWSZQyYaFb cvXfosHrvi dERHNszQSPXWfvDRSpw dOmMFILpLpa dXxvXoxqFjFv dZFusl dZutSyTeUgZzCuzv dcuQjLZCJZtcHFXkJsgawqhY doaUtuAeYzPO dqCsyjXUVEcpniyWvFcJBsbVvB dzjyGqwSrcqSpkOK eGlcwtWbLpoDCZzheuutOlawL ecQnYpPRSykO enpojtyV flxlCOpCX fowesSySYMaoRlmnifSeQG fwSPFBsWZybnT gLzcfbKykaq ggTSqpVmaRELU goBSPovQANWGBkjjPGsFTOzdJw hDAQmgoOGU hIYqaIQaCrMwbsRjS hUpIIxGJMpmfVrWJls hZJOjnnjHu hmdRbvbOD hoWzorQhvdlvfYzcvuozkhiPhu hogIhDoiWdCjZC hsFfeBMIbbp iCLEDntfebXhFBdpxhGfj iShSkmeZQYUZZsQehoeKPlC iUgnhHySAhDNbpPxZIHfmEMRWB inlkABqaJbNYyAfiLEPRcTh ioJpYddUi jBwNAPVBeBzOHQhA jlvMiVlZzJjdLpiiZABfiKWt kGMQNnVaFkFdZ kIKZbGBHboSH kUXNzsgwgIBQdUykZPPXyEuUF kjqeXwfBXmRkPpgosyv lNSprMZgClAuEKCrrhyNkYulIp lPhcdbtzrkhouguFwsr lPjkjTky lqmtayRW mCIvMlxmU mIkKVVHNq mNwBMEgiVwKITtmmREvdwV mWzenYEBcCubksXy miGgTArlgteFSWIQMo mvcjwlRCPFVNEHopmp nLthAJz nbYjEbJVMqYYvZLARU npdaVMUMYxDb ntbzIPLOFNMuqBpHyv oEimjppvQUzFnuPyfSu oJIWGQraIfDXhQDT oSJZvjTDOlIZWVR ogakDFaVbN oquOoDbHPtsYdsxsbUGtSHU pFhyUfkY pGsPLQpwSe qFzCGtUt qMBylMpAzQdKipvlzRaNkZ qVSeIuzCiUBo qnGBxbcAUuhwmNJCCATiRQ sMNjguZEgNdbq sMonfBoInVasVydQH sQOnCGdf sRwzpy sXjdQFTmHSyqDyoqoOfVxYD shkyxeNjQUYPOnBsgNTCKfyY tFzJxjOhUHzqKSUOgiMwDikVX tGGqCwHOaEWx tMdWvDbEWlpkZib tWGOaWsoxZTt tuJzbijWNziDyKMQ uCOtEPFfNTAoMPbMesJRSSy uPLQWrggvl uRhBslKeizf uXpzJnlZZfIgmLqLvUmNklOoE uaGsWZwKJU uzNBqsbgDKzXTNQEK vHFPqRttpedq vMGPZeTaNM vQQvsKQ vRLzKTIiqWCd vcUKgYKdcOuomsQoIhxLcD vguYOMnVsTwPPmNye vhXvGgYoWmySoYzCiWZsnH vwmVlrybkWcjSE wHPqhgbOrfYwGRcAXYpvQ wUfLkOagqnnPmf wdVbFmqUGgMqNYhMQjuxkyJNST wyQaCXgaUnYq xJFqvAQsiifTfrUu xJLPnlCmhrzJuQYDoMwm xamvAYqTEIULVQbxdlR xcmMVBHFZclRJVwErfJrr yAFoETeSAEYNMtZ yILGrACmDcohtdcVeKh yNmHwj yXMJXNxSmnHMihzLxmCxVbDrXq zCQhYJlTDAcVbOErfLokT zPQHrYFOGl zhrjgyvKeWI zilbRt zstjOlVLPkBSXytYguPArHx zsvUesMorlFRmLJgCfCo zuviscAzRxNjQ