6206bc0d22478736dec8a816dc98d9a39f05c7363e0350f7bf5a632d3b37db5d

Sharing

Copy URL Twitter E-mail

General

Target
6206bc0d22478736dec8a816dc98d9a39f05c7363e0350f7bf5a632d3b37db5d
Size 785KB
Sample221107-j1dj3afcf3
SHA256 6206bc0d22478736dec8a816dc98d9a39f05c7363e0350f7bf5a632d3b37db5d
MD5 a8e752add144ddb5773dba874d60abd5
SHA1 5cf035b409c714b105e076780d48450db0950b62
SHA512 2821a4d3a9aa521505ff7e2e42dbad2435ce6f0fb93e5aceef30348ea53446695f259e43dec20b6445e0bb21dc6f9cb17f17fd1acf4fdbb08bd9a1bdbcecaaeb
SSDEEP 12288:B3654Gl/CxZmBxCa4dKm3vcoqBhaLqhChSbNjGwO:B36Flqba4dKm3vcVGhajO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6206bc0d22478736dec8a816dc98d9a39f05c7363e0350f7bf5a632d3b37db5d

.dll 785KB

6206bc0d22478736dec8a816dc98d9a39f05c7363e0350f7bf5a632d3b37db5d

IMPHASH 6931934f7ab9b3eecee3b27fd5894384
SHA256 6206bc0d22478736dec8a816dc98d9a39f05c7363e0350f7bf5a632d3b37db5d
MD5 a8e752add144ddb5773dba874d60abd5
SHA1 5cf035b409c714b105e076780d48450db0950b62
SHA512 2821a4d3a9aa521505ff7e2e42dbad2435ce6f0fb93e5aceef30348ea53446695f259e43dec20b6445e0bb21dc6f9cb17f17fd1acf4fdbb08bd9a1bdbcecaaeb
SSDEEP 12288:B3654Gl/CxZmBxCa4dKm3vcoqBhaLqhChSbNjGwO:B36Flqba4dKm3vcVGhajO
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

211728

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesA HeapAlloc HeapFree RtlLookupFunctionEntry RtlUnwindEx HeapReAlloc RaiseException RtlPcToFileHeader CreateDirectoryA FlsSetValue GetCommandLineA GetProcessHeap HeapSize GetStdHandle HeapSetInformation HeapCreate HeapDestroy TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext FlsGetValue FlsFree FlsAlloc RtlVirtualUnwind GetACP SetStdHandle GetFileType SetHandleCount GetStartupInfoA GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW CreateFileA GetThreadLocale SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc WritePrivateProfileStringA GetCurrentProcessId CloseHandle ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FindResourceA LoadResource LockResource SizeofResource MulDiv SetLastError GetLocalTime FormatMessageA GetCurrentThread GetCurrentProcess LocalFree lstrcpynA GetModuleFileNameA LoadLibraryA GetProcAddress FreeLibrary OutputDebugStringA lstrcpyA DeleteAtom GlobalAddAtomA ExitProcess MultiByteToWideChar VirtualAlloc lstrlenA CompareStringA QueryPerformanceCounter QueryPerformanceFrequency GetVersion GetLastError WideCharToMultiByte Sleep

user32

SetTimer WindowFromPoint SetParent GetSysColorBrush GetMenuItemInfoA UnregisterClassA GetDCEx LockWindowUpdate CallNextHookEx GetClassLongA GetClassNameA GetClassLongPtrA GetFocus IsWindow SetFocus GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow SetWindowLongPtrA UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints TrackPopupMenu GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos PtInRect TranslateAcceleratorA GetDlgCtrlID DefWindowProcA SetRect OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetSysColor GetWindowDC ClientToScreen FillRect GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu MessageBoxA wsprintfA EndPaint GetSystemMetrics CopyRect LoadStringA LoadIconA GetDlgItem GetWindowLongA SetPropA SetCursor GetClientRect ReleaseCapture SetCapture GetParent GetWindowRect ScreenToClient GetDC DrawFocusRect ReleaseDC GetPropA CallWindowProcA SetWindowLongA RemovePropA LoadImageA DestroyIcon SendMessageA UpdateWindow KillTimer GetWindowThreadProcessId ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos InvalidateRect InflateRect LoadCursorA EnableWindow GrayStringA DrawTextExA DrawTextA TabbedTextOutA BeginPaint IsZoomed UnpackDDElParam ReuseDDElParam LoadMenuA DestroyMenu LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetWindowPos SetMenu ValidateRect PostQuitMessage GetDesktopWindow GetActiveWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog IsWindowEnabled ShowWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture SetWindowsHookExA GetWindowLongPtrA

gdi32

SelectObject SelectClipRgn OffsetClipRgn SetMapMode SetWindowExtEx SetViewportExtEx SetViewportOrgEx SetWindowOrgEx SetBkColor ExtTextOutA MoveToEx LineTo GetClipBox PtVisible RectVisible TextOutA Escape DeleteObject SetTextColor CreateFontIndirectA GetObjectA GetObjectType DeleteDC GetStockObject GetDeviceCaps SaveDC RestoreDC SetBkMode ExcludeClipRect GetCurrentObject GetPixel OffsetViewportOrgEx ScaleViewportExtEx ScaleWindowExtEx CreatePatternBrush CreateBitmap CreateSolidBrush CreateRectRgnIndirect SetRectRgn PatBlt GetTextMetricsA GetTextExtentPoint32A BitBlt Ellipse LPtoDP DPtoLP GetWindowExtEx GetViewportExtEx GetMapMode GetBkColor CreateCompatibleDC CombineRgn CreateEllipticRgn CreateRectRgn CreateCompatibleBitmap IntersectClipRect CreatePen

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegEnumKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA

shell32

DragFinish DragQueryFileA ShellExecuteExA

shlwapi

PathFindExtensionA

ole32

CoLoadLibrary

oleaut32

VariantInit VariantChangeType VariantClear

crypt32

CryptStringToBinaryA