9c5d93adeec049c054fb10cb3082b9ca[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
9c5d93adeec049c054fb10cb3082b9ca.dll.exe
Size 505KB
Sample230119-xpv7magh99
SHA256 37f73d6a2285e19c31a33a4087b8d86b73c394f06dec4b7559cbea3fb310b18b
MD5 9c5d93adeec049c054fb10cb3082b9ca
SHA1 bbe7aa111a0608ab0510c900632e13319bd34c54
SHA512 08367ed821533f72cd11fcc04d3eabbe2cde2584a22245c098a1e912ad245b3a53155516f6bfc572e9387b70c7230d81d8845f30ce66cc6a8928c47e08782096
SSDEEP 6144:DaRhOv5KaMqEZD+m6eewOmkGOYQ87wwzcCgZi3lzAOAWPcnL3G8Ztkq66ti9pdZx:wOKhDD6yUGOYQto3lzAOATntkfxeY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9c5d93adeec049c054fb10cb3082b9ca.dll.exe

.exe 505KB

9c5d93adeec049c054fb10cb3082b9ca.dll.exe

IMPHASH 521d2b6b3783f05d9e58c76c5f9844de
SHA256 37f73d6a2285e19c31a33a4087b8d86b73c394f06dec4b7559cbea3fb310b18b
MD5 9c5d93adeec049c054fb10cb3082b9ca
SHA1 bbe7aa111a0608ab0510c900632e13319bd34c54
SHA512 08367ed821533f72cd11fcc04d3eabbe2cde2584a22245c098a1e912ad245b3a53155516f6bfc572e9387b70c7230d81d8845f30ce66cc6a8928c47e08782096
SSDEEP 6144:DaRhOv5KaMqEZD+m6eewOmkGOYQ87wwzcCgZi3lzAOAWPcnL3G8Ztkq66ti9pdZx:wOKhDD6yUGOYQto3lzAOATntkfxeY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

247838

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FreeEnvironmentStringsW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetEnvironmentStrings FreeEnvironmentStringsA GetStdHandle VirtualFree HeapCreate GlobalUnlock IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapSize ExitProcess Sleep HeapReAlloc VirtualQuery GetSystemInfo VirtualProtect GetStartupInfoA GetCommandLineA RaiseException HeapAlloc HeapFree RtlUnwind GetTickCount GetCurrentDirectoryA GetFileSizeEx LocalFileTimeToFileTime FileTimeToLocalFileTime SetErrorMode SystemTimeToFileTime FileTimeToSystemTime GetModuleHandleW GetOEMCP GetCPInfo InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA InterlockedExchange lstrcmpA GetDiskFreeSpaceA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA InterlockedDecrement GetModuleFileNameW CreateFileA GetModuleFileNameA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiA GetThreadLocale GetStringTypeExA DeleteFileA MoveFileA FormatMessageA LocalFree MulDiv FreeResource GetCurrentThreadId GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA GetCurrentProcessId GetModuleHandleA GlobalGetAtomNameA GlobalAddAtomA MultiByteToWideChar lstrlenA WideCharToMultiByte SetLastError FindResourceA LoadResource LockResource SizeofResource VirtualAlloc LoadLibraryW GetLastError LoadLibraryA GetProcAddress FreeLibrary GlobalFree GlobalAlloc GlobalLock

user32

CharNextA DestroyIcon LockWindowUpdate GetDCEx UnregisterClassA WindowFromPoint GetSysColorBrush GetMenuItemInfoA InflateRect DestroyCursor SetRect LoadCursorA SetCapture KillTimer SetTimer SetWindowRgn DrawIcon SetWindowContextHelpId MapDialogRect ShowOwnedPopups GetMessageA TranslateMessage GetCursorPos ValidateRect SetParent GetSystemMenu DeleteMenu IsRectEmpty IsZoomed CreateDialogIndirectParamA GetNextDlgTabItem EndDialog CharUpperA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect GetMenuStringA AppendMenuA InsertMenuA RemoveMenu MoveWindow SetWindowTextA IsDialogMessageA SetDlgItemTextA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA GetMenuState CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA IsChild SetWindowsHookExA CallNextHookEx GetClassLongA SetPropA GetPropA RemovePropA GetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar MessageBoxA GetClassInfoExA RegisterClassA ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo PtInRect DefWindowProcA CallWindowProcA SystemParametersInfoA GetWindowPlacement GetWindowRect GetSystemMetrics GetClassNameA GetSysColor UnpackDDElParam ReuseDDElParam EnableWindow IsWindow UpdateWindow DefFrameProcA GetMenu LoadMenuA DestroyMenu WinHelpA SetFocus GetWindowThreadProcessId IsWindowEnabled EqualRect GetDlgItem GetDlgCtrlID GetKeyState LoadIconA SetCursor PeekMessageA GetCapture RegisterClipboardFormatA GetTabbedTextExtentA PostThreadMessageA CreateMenu MessageBeep GetNextDlgGroupItem InvalidateRgn EnableMenuItem CopyAcceleratorTableA SendMessageA DefMDIChildProcA GetMenuItemID GetSubMenu GetMenuItemCount GetParent CreateWindowExA DrawMenuBar GetActiveWindow BringWindowToTop TranslateMDISysAccel TranslateAcceleratorA SetWindowLongA GetWindowLongA GetClientRect SetWindowPos RedrawWindow AdjustWindowRectEx ShowWindow GetWindow GetDesktopWindow SetMenu PostMessageA GetLastActivePopup CopyRect SetRectEmpty OffsetRect IntersectRect GetClassInfoA CreatePopupMenu InsertMenuItemA IsIconic InvalidateRect IsWindowVisible SetActiveWindow LoadAcceleratorsA ReleaseCapture PostQuitMessage

gdi32

SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn DeleteDC CreatePatternBrush GetStockObject CreatePen CreateSolidBrush GetTextMetricsA GetTextExtentPoint32A GetCharWidthA CreateFontA CreateEllipticRgn DPtoLP LPtoDP SetWindowOrgEx StartPage EndPage SetAbortProc AbortDoc EndDoc GetViewportOrgEx Rectangle PatBlt CreateFontIndirectA CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode GetBkColor GetTextColor GetRgnBox GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceA GetTextExtentPointA GetWindowOrgEx SetViewportExtEx ScaleViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel BitBlt GetWindowExtEx GetViewportExtEx Ellipse SetDIBitsToDevice CreateRectRgn SelectClipRgn DeleteObject SetTextAlign MoveToEx LineTo IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateDCA GetDeviceCaps CreateBitmap SetBkColor SetTextColor GetClipBox CreateCompatibleDC CreateCompatibleBitmap GetObjectA StretchDIBits

comdlg32

GetFileTitleA

winspool.drv

GetJobA DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegDeleteValueA RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA GetFileSecurityA SetFileSecurityA RegOpenKeyA RegQueryValueExA RegSetValueA RegCloseKey RegCreateKeyA

shell32

DragFinish SHGetFileInfoA ExtractIconA DragQueryFileA

shlwapi

PathFindFileNameA PathFindExtensionA PathStripToRootA PathIsUNCA PathRemoveFileSpecW

oledlg

ord8

ole32

CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoFreeUnusedLibraries OleUninitialize OleDestroyMenuDescriptor OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CoInitializeEx CoUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoCreateInstance CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleInitialize

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString