32722517964c71f49d809c6ca1c9f9ae[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
32722517964c71f49d809c6ca1c9f9ae.dll
Size 2.7MB
Sample220907-lw8krabff3
SHA256 49b8a5f3abc91ff83f49bef5cb1180056d79d39fb9079005fdab65fd0e7f13d0
MD5 32722517964c71f49d809c6ca1c9f9ae
SHA1 24586e0871d3e19ec415ca6ce9883fa235e6d357
SHA512 1af5439062f521d35a681310afdf80cc65f49b1333ada4250f9ae9944df04b3217f7566e6001aec939942e7991fbf461e9794a4dc6a5788beca3c7733071a399
SSDEEP 49152:UnwY5UQC3ad5/iojZIphmzJAwSXX6cIOjYzxlOwiqo:yj9JAwyqKjYzxlOwo
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

32722517964c71f49d809c6ca1c9f9ae.dll

.dll 2.7MB

32722517964c71f49d809c6ca1c9f9ae.dll

IMPHASH c0d46b7ff0e53996feb53e4ba78f033e
SHA256 49b8a5f3abc91ff83f49bef5cb1180056d79d39fb9079005fdab65fd0e7f13d0
MD5 32722517964c71f49d809c6ca1c9f9ae
SHA1 24586e0871d3e19ec415ca6ce9883fa235e6d357
SHA512 1af5439062f521d35a681310afdf80cc65f49b1333ada4250f9ae9944df04b3217f7566e6001aec939942e7991fbf461e9794a4dc6a5788beca3c7733071a399
SSDEEP 49152:UnwY5UQC3ad5/iojZIphmzJAwSXX6cIOjYzxlOwiqo:yj9JAwyqKjYzxlOwo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

2192137

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle GetSystemInfo LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress LocalFree LockFileEx GetFileSize GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter HeapSize GetPrivateProfileStringA K32GetModuleFileNameExA TerminateProcess OpenProcess Process32First FindFirstFileA DeviceIoControl FindNextFileA GetVolumeInformationA GetModuleHandleA CreateToolhelp32Snapshot GlobalSize GlobalAlloc HeapReAlloc GetNativeSystemInfo GlobalLock GlobalMemoryStatusEx GlobalUnlock VirtualProtect K32GetModuleInformation CreateThread HeapValidate UnmapViewOfFile GetCurrentThreadId GetFileAttributesW CreateFileW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx DeleteFileW DeleteFileA WaitForSingleObjectEx CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA FormatMessageW SetEndOfFile GetFullPathNameA SetFilePointer InitializeCriticalSection LeaveCriticalSection LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile GetFullPathNameW EnterCriticalSection HeapFree HeapCreate TryEnterCriticalSection ReadFile AreFileApisANSI LoadLibraryA GetTickCount Sleep GetTempPathA Process32Next MultiByteToWideChar lstrcmpiW DeleteCriticalSection DecodePointer RaiseException GetLastError FlushFileBuffers WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileExW FindNextFileW GetFileInformationByHandle SetFileInformationByHandle SetFilePointerEx CopyFileW MoveFileExW GetFileInformationByHandleEx GetExitCodeThread QueryPerformanceFrequency GetStringTypeW LCMapStringEx EncodePointer GetModuleHandleW CompareStringEx GetCPInfo IsDebuggerPresent SetLastError SleepEx GetSystemDirectoryW GetEnvironmentVariableA GetStdHandle GetFileType PeekNamedPipe WaitForMultipleObjects VerSetConditionMask VerifyVersionInfoW GetFileSizeEx InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitProcess GetModuleFileNameW GetConsoleMode ReadConsoleW GetConsoleOutputCP GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation SetStdHandle IsValidCodePage GetACP GetOEMCP GetCommandLineA InitializeCriticalSectionEx

user32

ReleaseDC GetDC EnumDisplayDevicesA GetSystemMetrics GetDesktopWindow

gdi32

StretchBlt SetStretchBltMode CreateCompatibleBitmap SelectObject CreateCompatibleDC GetCurrentObject GetDIBits DeleteDC GetObjectW

advapi32

CryptAcquireContextA CryptReleaseContext CryptGenRandom CryptAcquireContextW CryptGetHashParam CryptCreateHash RegQueryValueExA CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt RegOpenKeyExA GetUserNameA RegGetValueA RegCloseKey

shell32

ShellExecuteA

ole32

GetHGlobalFromStream CoUninitialize CoCreateInstance CreateStreamOnHGlobal CoInitializeEx CoSetProxyBlanket CoInitializeSecurity CLSIDFromString

crypt32

CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CryptUnprotectData CertOpenStore CryptStringToBinaryW PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringW CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain

iphlpapi

GetAdaptersInfo

gdiplus

GdiplusStartup GdiplusShutdown GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipSaveImageToStream

urlmon

URLDownloadToFileA

ws2_32

getsockopt htons getpeername setsockopt socket WSASetLastError WSAIoctl WSAStartup WSACleanup __WSAFDIsSet select accept htonl listen getaddrinfo freeaddrinfo recvfrom sendto ioctlsocket gethostname connect bind recv WSAGetLastError closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send getsockname ntohs

wldap32

ord167 ord301 ord147 ord133 ord127 ord27 ord26 ord117 ord41 ord208 ord73 ord216 ord14 ord46 ord219 ord145 ord79 ord142