549fbcf370a79395942dde1e5bc6e8d4[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
549fbcf370a79395942dde1e5bc6e8d4.dll.exe
Size 745KB
Sample221103-2dmtbsabej
SHA256 2c856b198e4b5be28f024fa313a9126f4f2c58017c900b87fd0a820d185a62a8
MD5 549fbcf370a79395942dde1e5bc6e8d4
SHA1 95f77d0e49a54611f41c050bb4c73289af86e02d
SHA512 dceeb067599dd434d58ce8ec84a191673935e298bcd891ddcf6ab71c32d40ba946b7096ef935ac66c89f25cdacfe86c0c90345c3c81a7046c00fae858f5b58a8
SSDEEP 6144:i5htEuwPCwdooxhXLY/3tvDc2YLV9yWoPTvtQPZOBk8DvpyGj/eoyOyqTJDrRtFw:EaCwpDXstOby/ZQPrnGbWEJDDFY1cA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

549fbcf370a79395942dde1e5bc6e8d4.dll.exe

.dll 745KB

549fbcf370a79395942dde1e5bc6e8d4.dll.exe

IMPHASH bd670eb847cf4465f552bc5226682890
SHA256 2c856b198e4b5be28f024fa313a9126f4f2c58017c900b87fd0a820d185a62a8
MD5 549fbcf370a79395942dde1e5bc6e8d4
SHA1 95f77d0e49a54611f41c050bb4c73289af86e02d
SHA512 dceeb067599dd434d58ce8ec84a191673935e298bcd891ddcf6ab71c32d40ba946b7096ef935ac66c89f25cdacfe86c0c90345c3c81a7046c00fae858f5b58a8
SSDEEP 6144:i5htEuwPCwdooxhXLY/3tvDc2YLV9yWoPTvtQPZOBk8DvpyGj/eoyOyqTJDrRtFw:EaCwpDXstOby/ZQPrnGbWEJDDFY1cA
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

205648

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

crypt32

CryptStringToBinaryA

kernel32

GetFileAttributesA HeapAlloc HeapFree RtlLookupFunctionEntry RtlUnwindEx HeapReAlloc RaiseException RtlPcToFileHeader CreateDirectoryA FlsSetValue GetCommandLineA GetProcessHeap ExitProcess HeapSize GetStdHandle HeapSetInformation HeapCreate HeapDestroy TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext FlsGetValue FlsFree FlsAlloc RtlVirtualUnwind Sleep GetACP SetStdHandle GetFileType SetHandleCount GetStartupInfoA GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetSystemTimeAsFileTime LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW MultiByteToWideChar WideCharToMultiByte GetLastError GetVersion QueryPerformanceFrequency QueryPerformanceCounter CompareStringA lstrlenA GlobalAddAtomA DeleteAtom lstrcpyA VirtualAlloc OutputDebugStringA FreeLibrary GetProcAddress LoadLibraryA GetModuleFileNameA lstrcpynA LocalFree GetCurrentProcess GetCurrentThread FormatMessageA GetLocalTime SetLastError MulDiv SizeofResource LockResource CreateFileA GetThreadLocale SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc WritePrivateProfileStringA GetCurrentProcessId CloseHandle ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA LoadResource FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FindResourceA LCMapStringA

user32

IsZoomed SetRect SetTimer WindowFromPoint SetParent GetSysColorBrush GetMenuItemInfoA UnregisterClassA GetDCEx LockWindowUpdate ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog IsWindowEnabled ShowWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA GetClassLongPtrA GetFocus IsWindow SetFocus GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow UnpackDDElParam BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos PeekMessageA MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos PtInRect GetDlgCtrlID DefWindowProcA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetSysColor GetWindowDC ClientToScreen FillRect KillTimer BeginPaint TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu MessageBoxA wsprintfA EndPaint GetSystemMetrics CopyRect ReuseDDElParam LoadMenuA DestroyMenu LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA DispatchMessageA GetWindowThreadProcessId EnableWindow LoadCursorA InflateRect InvalidateRect UpdateWindow SendMessageA DestroyIcon LoadImageA RemovePropA SetWindowLongA CallWindowProcA GetPropA ReleaseDC DrawFocusRect GetDC LoadStringA LoadIconA GetDlgItem GetWindowLongA SetPropA GetClientRect ReleaseCapture SetCapture SetCursor GetParent GetWindowRect ScreenToClient UnhookWindowsHookEx

gdi32

GetCurrentObject SelectObject SelectClipRgn OffsetClipRgn SetMapMode SetWindowExtEx SetViewportExtEx SetViewportOrgEx SetWindowOrgEx SetBkColor ExtTextOutA MoveToEx LineTo GetClipBox PtVisible RectVisible TextOutA Escape DeleteObject SetTextColor CreateFontIndirectA GetObjectA GetObjectType DeleteDC GetStockObject GetDeviceCaps SaveDC RestoreDC SetBkMode BitBlt IntersectClipRect GetPixel OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx CreatePatternBrush CreateBitmap CreateSolidBrush CreateRectRgnIndirect SetRectRgn PatBlt GetTextMetricsA GetTextExtentPoint32A Ellipse LPtoDP DPtoLP GetWindowExtEx GetViewportExtEx GetMapMode GetBkColor CreateCompatibleDC CombineRgn CreateEllipticRgn CreateRectRgn CreateCompatibleBitmap ExcludeClipRect CreatePen

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegCloseKey

shell32

DragFinish DragQueryFileA ShellExecuteExA

shlwapi

PathFindExtensionA

ole32

CoLoadLibrary

oleaut32

VariantClear VariantChangeType VariantInit