f0255899935664d4bea4a1ec43df164a

Sharing

Copy URL Twitter E-mail

General

Target
f0255899935664d4bea4a1ec43df164a
Size 736KB
Sample220520-cb4xdsebg8
SHA256 b8ba8faf3f7e2eb2c0b0d7b5a82ed8036340974fca12e87333b7cfc863bf0405
MD5 f0255899935664d4bea4a1ec43df164a
SHA1 7f49b0ec0a3fe3cce274eb0f3b9cb8cb6aa18641
SHA512 8cbae17c3c877060ff9ff3c33e5f89ca688fb49778abedcd926cbf291afd16bb8c5e0806c05dec26c98cd36ce97e91916068e55661b2bbd3390d96038fa2f725
SSDEEP 12288:LJsMwUL89WbZz4di6gy1X+bcxhSntqYuXKw29lTxbkTi+kK:LJsMwULdN8d3gy1X+mhIuXKwIlqTtkK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f0255899935664d4bea4a1ec43df164a

.dll 736KB

f0255899935664d4bea4a1ec43df164a

IMPHASH cef7e711f2eeb92f122893202dc2ab83
SHA256 b8ba8faf3f7e2eb2c0b0d7b5a82ed8036340974fca12e87333b7cfc863bf0405
MD5 f0255899935664d4bea4a1ec43df164a
SHA1 7f49b0ec0a3fe3cce274eb0f3b9cb8cb6aa18641
SHA512 8cbae17c3c877060ff9ff3c33e5f89ca688fb49778abedcd926cbf291afd16bb8c5e0806c05dec26c98cd36ce97e91916068e55661b2bbd3390d96038fa2f725
SSDEEP 12288:LJsMwUL89WbZz4di6gy1X+bcxhSntqYuXKw29lTxbkTi+kK:LJsMwULdN8d3gy1X+mhIuXKwIlqTtkK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

230176

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

inet_addr WSACleanup gethostbyname WSAStartup

kernel32

FileTimeToLocalFileTime GetFileAttributesA GetFileTime GetTickCount RtlLookupFunctionEntry RtlUnwindEx RaiseException RtlPcToFileHeader HeapFree VirtualProtect GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap HeapSize FlsGetValue FlsFree FlsAlloc Sleep TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext HeapSetInformation HeapCreate HeapDestroy GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetLocaleInfoW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId SetLastError GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress GetLastError lstrlenA CompareStringA CompareStringW MultiByteToWideChar GetVersion LoadResource LockResource SizeofResource FindResourceA WideCharToMultiByte LoadLibraryW ExitProcess VirtualAlloc RtlVirtualUnwind

user32

CharNextA CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow MoveWindow SetWindowTextA IsDialogMessageA GetDlgItemTextA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA SetFocus GetSysColorBrush GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow ReleaseCapture LoadCursorA SetCapture EndPaint GetWindowTextA BeginPaint IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage CharUpperA EnableWindow IsIconic GetSystemMetrics GetClientRect DrawIcon GetSystemMenu AppendMenuA SendMessageA LoadIconA GetMenu

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetDeviceCaps ScaleViewportExtEx GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible SetBkColor SetTextColor GetClipBox CreateBitmap DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA PtVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleInitialize OleUninitialize CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree CoRevokeClassObject CoRegisterMessageFilter OleFlushClipboard CoFreeUnusedLibraries OleIsCurrentClipboard

oleaut32

SysFreeString VariantCopy SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysAllocStringByteLen SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen