em12[.]dll[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
em12.dll.exe
Size 727KB
Sample221102-3bz7bafcdp
SHA256 ff7c0b5bc5e66d527357806e3e5d5f4ad8fe346c9cf9c76b0287d7354098e57b
MD5 f9d76cb24542e55ce9a5910e50ce0734
SHA1 d69625510e361a87dcbe11d6789209891f0b1f0f
SHA512 c94fe8a391e4f991084b60d670708ee41784e05bfff75d54228624f1747f9bf051944d3dc46fed1b2944883f212f63b9a4880473c7c20d876a3a698209257745
SSDEEP 12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+iSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6bjtJqzf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

em12.dll.exe

.dll 727KB

em12.dll.exe

IMPHASH f26dad9f8445297eee4d3315e0e818a0
SHA256 ff7c0b5bc5e66d527357806e3e5d5f4ad8fe346c9cf9c76b0287d7354098e57b
MD5 f9d76cb24542e55ce9a5910e50ce0734
SHA1 d69625510e361a87dcbe11d6789209891f0b1f0f
SHA512 c94fe8a391e4f991084b60d670708ee41784e05bfff75d54228624f1747f9bf051944d3dc46fed1b2944883f212f63b9a4880473c7c20d876a3a698209257745
SSDEEP 12288:ezhsu7PWe6Fth9tmzQS+37pzGIz/mXpo1z+iSjq+DsCJqzfo:ktR6rhjmzhsT/Yg6bjtJqzf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

291860

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FlsSetValue GetCommandLineA HeapAlloc HeapFree Sleep ExitProcess HeapReAlloc HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetACP IsValidCodePage GetSystemTimeAsFileTime GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW RtlPcToFileHeader RaiseException RtlUnwindEx RtlLookupFunctionEntry GetModuleHandleW GetOEMCP GetCPInfo CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA FormatMessageA LocalFree MulDiv lstrlenA GlobalGetAtomNameA GlobalFindAtomA MultiByteToWideChar lstrcmpW GetVersionExA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CloseHandle GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress LoadResource LockResource SizeofResource FindResourceA SetHandleCount WideCharToMultiByte

user32

SetRect KillTimer WindowFromPoint EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA RemovePropA SetFocus InvalidateRect GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetWindowLongPtrA UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos SystemParametersInfoA LoadIconA SetTimer GetClientRect SendMessageA GetWindowPlacement GetWindow GetWindowRect OffsetRect SetRectEmpty IsZoomed GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem GetSysColorBrush GetWindowTextA LoadCursorA AppendMenuA GetSystemMenu DrawIcon GetSystemMetrics IsIconic EnableWindow PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible SetWindowLongPtrA

gdi32

DeleteDC GetStockObject GetDeviceCaps GetBkColor SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape TextOutA RectVisible PtVisible CreateBitmap DeleteObject IntersectClipRect ExcludeClipRect SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA SetBkColor SetTextColor GetClipBox GetTextExtentPoint32A GetTextMetricsA SelectObject

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindExtensionA

ole32

CoLoadLibrary

oleaut32

VariantClear VariantChangeType VariantInit