3b973027fb66a0944f3547b8e6bda58a

Sharing

Copy URL Twitter E-mail

General

Target
3b973027fb66a0944f3547b8e6bda58a
Size 736KB
Sample220520-cxevdshbhp
SHA256 ea5615a0e070267d930c44e9b58d7c5be166d7d7a8107f12a97027e8d22e3eaf
MD5 3b973027fb66a0944f3547b8e6bda58a
SHA1 57b5978df98b86781e442a3da2c8c314c5279664
SHA512 cc437ebd569457ed215a339fb5b5f7b3f1c708d7515d7e7753b53433f645ea597394754acefd0e57238eda6d67ba3ddf42c9b16b3763701ae03a6a9d68fff638
SSDEEP 12288:LJsMwUL89WbZz4di6gy1X+0cxhSntqYuXKw29lTxbkTi+kK:LJsMwULdN8d3gy1X+rhIuXKwIlqTtkK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3b973027fb66a0944f3547b8e6bda58a

.dll 736KB

3b973027fb66a0944f3547b8e6bda58a

IMPHASH cef7e711f2eeb92f122893202dc2ab83
SHA256 ea5615a0e070267d930c44e9b58d7c5be166d7d7a8107f12a97027e8d22e3eaf
MD5 3b973027fb66a0944f3547b8e6bda58a
SHA1 57b5978df98b86781e442a3da2c8c314c5279664
SHA512 cc437ebd569457ed215a339fb5b5f7b3f1c708d7515d7e7753b53433f645ea597394754acefd0e57238eda6d67ba3ddf42c9b16b3763701ae03a6a9d68fff638
SSDEEP 12288:LJsMwUL89WbZz4di6gy1X+0cxhSntqYuXKw29lTxbkTi+kK:LJsMwULdN8d3gy1X+rhIuXKwIlqTtkK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

230176

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

inet_addr WSACleanup gethostbyname WSAStartup

kernel32

FileTimeToLocalFileTime GetFileAttributesA GetFileTime GetTickCount RtlLookupFunctionEntry RtlUnwindEx RaiseException RtlPcToFileHeader HeapFree VirtualProtect GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap HeapSize FlsGetValue FlsFree FlsAlloc Sleep TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext HeapSetInformation HeapCreate HeapDestroy GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetLocaleInfoW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA FormatMessageA LocalFree MulDiv GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId SetLastError GlobalAddAtomA CloseHandle GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress GetLastError lstrlenA CompareStringA CompareStringW MultiByteToWideChar GetVersion LoadResource LockResource SizeofResource FindResourceA WideCharToMultiByte LoadLibraryW ExitProcess VirtualAlloc RtlVirtualUnwind

user32

CharNextA CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep UnregisterClassA RegisterClipboardFormatA PostThreadMessageA GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow MoveWindow SetWindowTextA IsDialogMessageA GetDlgItemTextA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA SetFocus GetSysColorBrush GetForegroundWindow GetTopWindow GetWindowLongPtrA SetWindowLongPtrA UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow ReleaseCapture LoadCursorA SetCapture EndPaint GetWindowTextA BeginPaint IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage CharUpperA EnableWindow IsIconic GetSystemMetrics GetClientRect DrawIcon GetSystemMenu AppendMenuA SendMessageA LoadIconA GetMenu

gdi32

SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC GetStockObject GetDeviceCaps ScaleViewportExtEx GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible SetBkColor SetTextColor GetClipBox CreateBitmap DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA PtVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleInitialize OleUninitialize CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree CoRevokeClassObject CoRegisterMessageFilter OleFlushClipboard CoFreeUnusedLibraries OleIsCurrentClipboard

oleaut32

SysFreeString VariantCopy SysAllocString SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysAllocStringByteLen SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen