7e9a2820d6ed0af3d58e9d9f06ca48d3

Sharing

Copy URL Twitter E-mail

General

Target
7e9a2820d6ed0af3d58e9d9f06ca48d3
Size 535KB
Sample220703-3hpddsdeaq
SHA256 6765fcb5eaad8b0ed14dd22a6e109b63dbcea7960309b3b3c6727e6b4390e08c
MD5 7e9a2820d6ed0af3d58e9d9f06ca48d3
SHA1 b106a1060224236f125abb71bda8d0e377e52cb6
SHA512 88f5dac762f0a7828394c66d37c75a2cf29a0f6bae13cd21de9715583c03782826d5d4e9bdfd3bd3d1b10242302e8aaa681f7f324559d21228fcb6ae5dcf0523
SSDEEP 12288:DlAUM5xIuIl2T7X0GDjIMA8KnrLXYSm+mB7DX:BAUM5xI6XpDjIdPXe+mt
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

7e9a2820d6ed0af3d58e9d9f06ca48d3

.dll 535KB

7e9a2820d6ed0af3d58e9d9f06ca48d3

IMPHASH 8c00a523fc36460f621f8a7af86915f2
SHA256 6765fcb5eaad8b0ed14dd22a6e109b63dbcea7960309b3b3c6727e6b4390e08c
MD5 7e9a2820d6ed0af3d58e9d9f06ca48d3
SHA1 b106a1060224236f125abb71bda8d0e377e52cb6
SHA512 88f5dac762f0a7828394c66d37c75a2cf29a0f6bae13cd21de9715583c03782826d5d4e9bdfd3bd3d1b10242302e8aaa681f7f324559d21228fcb6ae5dcf0523
SSDEEP 12288:DlAUM5xIuIl2T7X0GDjIMA8KnrLXYSm+mB7DX:BAUM5xI6XpDjIdPXe+mt
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

121392

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetSystemTimeAsFileTime RtlLookupFunctionEntry RtlUnwindEx HeapAlloc HeapFree HeapReAlloc FlsSetValue GetCommandLineA GetProcessHeap RaiseException RtlPcToFileHeader ExitProcess HeapSize FlsGetValue FlsFree FlsAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlVirtualUnwind Sleep GetStdHandle HeapSetInformation HeapCreate SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary LoadLibraryA lstrcmpW GetVersionExA GetModuleHandleA GetProcAddress GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv SetLastError lstrlenA CompareStringA GetVersion GetLastError MultiByteToWideChar WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource HeapDestroy VirtualAlloc

user32

GetSysColorBrush GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage IsWindowEnabled SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA GetClassLongPtrA SetPropA UnregisterClassA RemovePropA GetFocus IsWindow SetFocus GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow GetWindowLongPtrA SetWindowLongPtrA UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx GetParent CopyRect GetClientRect GetDC ReleaseDC InvalidateRect SetTimer EnableWindow PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowPos SystemParametersInfoA GetWindowPlacement DestroyMenu GetPropA LoadCursorA ShowWindow DrawIcon SendMessageA IsIconic LoadIconA GetSystemMetrics GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState GetWindowRect GetWindow GetSysColor EndPaint BeginPaint ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA

gdi32

OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC CreateBitmap GetStockObject SetViewportOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible GetObjectA CreateFontA GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC GetDeviceCaps CreateDIBSection DeleteObject SetDIBitsToDevice GetTextMetricsA BitBlt SelectObject CreateCompatibleDC CreateCompatibleBitmap

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shlwapi

PathFindExtensionA

ole32

CoInitialize CoTaskMemAlloc CoTaskMemFree

oleaut32

VariantClear VariantChangeType VariantInit

Name

.text

Size

206KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

TEXT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

222KB

Virtual Size

221KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ