2071b307417f667853f239a0a8648286

Sharing

Copy URL Twitter E-mail

General

Target
2071b307417f667853f239a0a8648286
Size 636KB
Sample220522-aql9saebb8
SHA256 670652f8d0b2b7fbc65af672165f53aeecf8f7861c6d1d8db7b54aa98153586d
MD5 2071b307417f667853f239a0a8648286
SHA1 5da1f433dfe098dbeb5cbd143be27dd116786d91
SHA512 6217d7194f846665ad113593c317717e4f174b9f7f6c7d763dfe73e8eea177ab43466b2f988cdcb5ac73326dc4dec826503ec127eeb6d676657ebdcc8ce962ec
SSDEEP 6144:zjc8LiaEY9jcPvsZabcPu36IOCE3OXPqLkHUaPVlCWLWpK22A7ssIaa6o+zOGhMp:DWaEQQPEab0IcwdjkD6TtQay0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2071b307417f667853f239a0a8648286

.dll 636KB

2071b307417f667853f239a0a8648286

IMPHASH d63ab94f4bb6b5d2f0f6092bf07e00ac
SHA256 670652f8d0b2b7fbc65af672165f53aeecf8f7861c6d1d8db7b54aa98153586d
MD5 2071b307417f667853f239a0a8648286
SHA1 5da1f433dfe098dbeb5cbd143be27dd116786d91
SHA512 6217d7194f846665ad113593c317717e4f174b9f7f6c7d763dfe73e8eea177ab43466b2f988cdcb5ac73326dc4dec826503ec127eeb6d676657ebdcc8ce962ec
SSDEEP 6144:zjc8LiaEY9jcPvsZabcPu36IOCE3OXPqLkHUaPVlCWLWpK22A7ssIaa6o+zOGhMp:DWaEQQPEab0IcwdjkD6TtQay0
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

70908

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind GetSystemTimeAsFileTime GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW VirtualQuery QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA GetSystemInfo VirtualAlloc VirtualProtect HeapFree HeapAlloc GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement DeleteCriticalSection InitializeCriticalSection RaiseException GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CloseHandle GlobalAddAtomA GetCurrentThread GetCurrentThreadId FreeLibrary GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA LoadLibraryA FreeResource SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree ExitProcess GetStringTypeExA CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP UnhandledExceptionFilter InterlockedExchange

user32

KillTimer WindowFromPoint GetDCEx LockWindowUpdate RegisterClipboardFormatA PostThreadMessageA SetRect CharNextA DestroyIcon EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect LoadCursorA GetSysColorBrush SetParent GetSystemMenu DeleteMenu IsRectEmpty IsZoomed GetDC ReleaseDC LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA InvalidateRect RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints TrackPopupMenu SetForegroundWindow SetTimer GetClientRect GetMenu GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect wsprintfA GetWindowTextLengthA GetWindowTextA SetWindowPos CharUpperA UpdateWindow EnableWindow SendMessageA GetClassInfoExA GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID AppendMenuA SetFocus ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetMenuItemInfoA InflateRect SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA GetMenuStringA GetMenuState EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA GetSystemMetrics SetActiveWindow GetActiveWindow GetDesktopWindow PostQuitMessage PostMessageA SetCursor ShowOwnedPopups GetLastActivePopup MessageBoxA ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible DispatchMessageA

gdi32

CreateSolidBrush CreateFontIndirectA GetBkColor GetTextColor GetStockObject GetRgnBox PatBlt SetRectRgn CombineRgn GetMapMode CreatePatternBrush ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx CreateRectRgnIndirect GetDeviceCaps CreateRectRgn SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A GetTextMetricsA CreateFontA GetCharWidthA DeleteObject SelectObject StretchDIBits DeleteDC CreateCompatibleDC CreateCompatibleBitmap GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetViewportExtEx

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

GetFileSecurityA RegSetValueA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegCreateKeyA RegCloseKey SetFileSecurityA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString