f8ee632b987ee16d1cccb0258797b683

Sharing

Copy URL Twitter E-mail

General

Target
f8ee632b987ee16d1cccb0258797b683
Size 520KB
Sample220522-a3gvtshdhm
SHA256 4b08f36c5b9400f866d75be6ba7545624873ecb2f22c0c0379e4d40ca698c49e
MD5 f8ee632b987ee16d1cccb0258797b683
SHA1 c946804f03e581d8dd1530f700f582e9a24f2fbd
SHA512 ef99944bd3da648fed1fe31ecb982a54f266d2d43b18120c4b74153beb31ee0e8004098a73c7c1fa45cfbc0c55074f2faeb9906c23b0e60e23a0594241fda4dc
SSDEEP 6144:T4nNZVhzXP5O5+x/5QTHXMCQM2M/bRSgvfj609XJ82txxIikTnPdALLLDSqTYfV9:obdQTHLbPJJ82qFAyq8fVQi5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f8ee632b987ee16d1cccb0258797b683

.dll 520KB

f8ee632b987ee16d1cccb0258797b683

IMPHASH f372ffd215ce36fff280c952ece006b4
SHA256 4b08f36c5b9400f866d75be6ba7545624873ecb2f22c0c0379e4d40ca698c49e
MD5 f8ee632b987ee16d1cccb0258797b683
SHA1 c946804f03e581d8dd1530f700f582e9a24f2fbd
SHA512 ef99944bd3da648fed1fe31ecb982a54f266d2d43b18120c4b74153beb31ee0e8004098a73c7c1fa45cfbc0c55074f2faeb9906c23b0e60e23a0594241fda4dc
SSDEEP 6144:T4nNZVhzXP5O5+x/5QTHXMCQM2M/bRSgvfj609XJ82txxIikTnPdALLLDSqTYfV9:obdQTHLbPJJ82qFAyq8fVQi5
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

157722

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA HeapAlloc HeapFree HeapReAlloc VirtualAlloc RtlUnwind RaiseException GetCommandLineA GetProcessHeap ExitThread CreateThread HeapSize VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetFullPathNameA LCMapStringA LCMapStringW Sleep SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetThreadLocale GetOEMCP GetCPInfo GlobalFlags InterlockedIncrement TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc InterlockedDecrement GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetModuleFileNameA FreeResource GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GetCurrentProcessId GetModuleHandleA GlobalGetAtomNameA GlobalAddAtomA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv SetLastError SuspendThread GetCurrentThreadId ResumeThread CloseHandle CreateEventA ResetEvent ExitProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WaitForSingleObject SetEvent GetStringTypeExA lstrlenA lstrcmpiA CompareStringA FreeLibrary lstrcpynA LoadLibraryA GetProcAddress GetTickCount GetVersion InterlockedCompareExchange GetLastError WideCharToMultiByte MultiByteToWideChar GetACP InterlockedExchange

user32

TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint InflateRect GetMenuItemInfoA GetDCEx LockWindowUpdate SetCapture UnregisterClassA ScreenToClient DeferWindowPos PtInRect DefWindowProcA CallWindowProcA SystemParametersInfoA GetWindowPlacement GetWindowRect GetSystemMetrics GetWindowTextLengthA GetWindowTextA MoveWindow SetWindowTextA IsDialogMessageA SetDlgItemInt SendDlgItemMessageA GetDlgItemInt CheckDlgButton RegisterWindowMessageA UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu GetClassNameA GetSysColor WinHelpA SetWindowPos SetFocus GetWindowThreadProcessId IsWindowEnabled EqualRect GetDlgItem SetWindowLongA GetDlgCtrlID SetTimer LoadIconA SetCursor FillRect ReleaseCapture LoadAcceleratorsA SetActiveWindow InvalidateRect UpdateWindow IsIconic InsertMenuItemA CreatePopupMenu GetClassInfoA IntersectRect OffsetRect SetRectEmpty CopyRect GetLastActivePopup BringWindowToTop SetMenu GetDesktopWindow GetWindow ShowWindow GetWindowLongA TranslateAcceleratorA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible ClientToScreen SetRect SetParent GetSystemMenu DeleteMenu IsRectEmpty GetKeyState PeekMessageA GetCursorPos ValidateRect IsWindow EnableWindow PostMessageA CharUpperA wsprintfA SendMessageA LoadCursorA GetSysColorBrush ShowOwnedPopups PostQuitMessage CreateDialogIndirectParamA GetNextDlgTabItem EndDialog IsZoomed WindowFromPoint GetCapture KillTimer GetDC ReleaseDC IsChild GetClassLongA SetPropA GetPropA RemovePropA GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints TrackPopupMenu SetForegroundWindow GetClientRect MessageBoxA CreateWindowExA GetClassInfoExA RegisterClassA GetMenu AdjustWindowRectEx

gdi32

CreateFontA DeleteDC StretchDIBits GetBkColor GetTextMetricsA GetTextExtentPoint32A SaveDC RestoreDC SetBkMode SetMapMode ExcludeClipRect IntersectClipRect SelectClipRgn CreateRectRgn BitBlt GetPixel PtVisible SelectObject TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx CreatePatternBrush GetStockObject CreateSolidBrush CreateFontIndirectA CreateRectRgnIndirect PatBlt SetRectRgn CombineRgn GetCharWidthA DeleteObject GetObjectA SetBkColor SetTextColor GetClipBox CreateCompatibleDC CreateCompatibleBitmap CreateBitmap RectVisible GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shell32

DragQueryFileA DragFinish

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ws2_32

WSAStartup inet_ntoa ntohl WSACleanup gethostname gethostbyaddr gethostbyname inet_addr

snmpapi

SnmpUtilMemAlloc SnmpUtilOidFree SnmpUtilOidCpy SnmpUtilMemFree

oleaut32

VariantClear VariantInit SysAllocStringLen VariantChangeType