9461dbb9d3a089351f08aad22a20de72db7fec86063ef63efeff314b86176a08

Sharing

Copy URL Twitter E-mail

General

Target
9461dbb9d3a089351f08aad22a20de72db7fec86063ef63efeff314b86176a08
Size 818KB
Sample221103-pd9a4saab8
SHA256 9461dbb9d3a089351f08aad22a20de72db7fec86063ef63efeff314b86176a08
MD5 e24893b2d35301086d3891ecce5c6859
SHA1 80a9ab7f89830fa20bbe5ff289acb32a5c9c70eb
SHA512 449067316f5e9af7ce9240d8248f18569840cd86acea603ceb12c8b8b83f02e8c41abe6364a9d8513cbe650efcb94340a9a93340d0a7d6c5744898ce5cb927e8
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rkx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rqwC2Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9461dbb9d3a089351f08aad22a20de72db7fec86063ef63efeff314b86176a08

.dll 818KB

9461dbb9d3a089351f08aad22a20de72db7fec86063ef63efeff314b86176a08

IMPHASH 82eb2cf476173bf58ddb7f134197373d
SHA256 9461dbb9d3a089351f08aad22a20de72db7fec86063ef63efeff314b86176a08
MD5 e24893b2d35301086d3891ecce5c6859
SHA1 80a9ab7f89830fa20bbe5ff289acb32a5c9c70eb
SHA512 449067316f5e9af7ce9240d8248f18569840cd86acea603ceb12c8b8b83f02e8c41abe6364a9d8513cbe650efcb94340a9a93340d0a7d6c5744898ce5cb927e8
SSDEEP 12288:NdewIvxiRO9n6DPBt9bu8X+L81JcZl1rkx48/2aS4/2YX:NYwIvxFMXn+L8zcZ7rqwC2Y
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

329684

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FlsSetValue GetCommandLineA HeapAlloc HeapFree Sleep ExitProcess ExitThread CreateThread VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA RtlPcToFileHeader FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetTimeZoneInformation GetLocaleInfoW GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA RaiseException RtlUnwindEx RtlLookupFunctionEntry GetTickCount GetFileTime GetFileSizeEx GetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetModuleHandleW CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags WritePrivateProfileStringA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA GlobalUnlock GlobalFree FreeResource GetCurrentProcessId GetLastError SetLastError GlobalAddAtomA CreateEventA SuspendThread SetEvent ResumeThread GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA LoadLibraryA CompareStringA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetModuleHandleA GetProcAddress WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource CreateMutexA WaitForSingleObject ReleaseMutex GetEnvironmentStrings CloseHandle

user32

RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush ReleaseCapture LoadCursorA SetCapture EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA GetClassLongPtrA SetPropA GetPropA SetFocus GetWindowTextLengthA GetWindowTextA GetTopWindow GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect GetWindowPlacement GetWindowRect GetSysColor SystemParametersInfoA DestroyMenu CopyRect UnhookWindowsHookEx DrawIcon AppendMenuA SendMessageA GetSystemMenu GetMenuItemID GetMenuItemCount GetSubMenu GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableA CharNextA GetForegroundWindow CharUpperA IsIconic GetClientRect LoadIconA EnableWindow GetSystemMetrics PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetWindowLongA GetWindowThreadProcessId EndDialog GetNextDlgTabItem GetDlgItem IsWindow RemovePropA

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode SetWindowExtEx ScaleWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox ExtTextOutA GetObjectA GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID CoLoadLibrary OleFlushClipboard CoRegisterMessageFilter CoGetClassObject

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString