850497ed0130a5247a6c4650bca0af4be152be4cb88cca142b88df6fed854cd3

General

Target
850497ed0130a5247a6c4650bca0af4be152be4cb88cca142b88df6fed854cd3
Size 375KB
Sample220121-3kmbtadba5
SHA256 850497ed0130a5247a6c4650bca0af4be152be4cb88cca142b88df6fed854cd3
MD5 e9b6075238f35208a15b1da622669107
SHA1 5092693d0456bdcd5ee99999341577af9421ba59
SHA512 4d86acd54ce112774dadd71cce8c4d6f83ebfcc414f583e1e9f861655ec03f45098b60b5ae8177ff6ea8a99b749c5befa8ece52cc92dc60dcff716c7c0dc8bc8
SSDEEP 6144:GOEzu3m19VC4Dtrv4PYXLEdg6hrVjIWdPMgQGBf44hIH7:jEem19V3r4RpLQP4a
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

850497ed0130a5247a6c4650bca0af4be152be4cb88cca142b88df6fed854cd3

.dll 375KB

850497ed0130a5247a6c4650bca0af4be152be4cb88cca142b88df6fed854cd3

IMPHASH 3b97afa05f9af4726d1491fa3df117b6
SHA256 850497ed0130a5247a6c4650bca0af4be152be4cb88cca142b88df6fed854cd3
MD5 e9b6075238f35208a15b1da622669107
SHA1 5092693d0456bdcd5ee99999341577af9421ba59
SHA512 4d86acd54ce112774dadd71cce8c4d6f83ebfcc414f583e1e9f861655ec03f45098b60b5ae8177ff6ea8a99b749c5befa8ece52cc92dc60dcff716c7c0dc8bc8
SSDEEP 6144:GOEzu3m19VC4Dtrv4PYXLEdg6hrVjIWdPMgQGBf44hIH7:jEem19V3r4RpLQP4a
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

149482

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExA RegQueryValueExA RegQueryInfoKeyA RegCloseKey RegDeleteValueA RegEnumValueA RegOpenKeyExA RegEnumKeyExA RegSetValueExA

kernel32

CloseHandle LoadLibraryExA GetSystemInfo lstrcpynA GetVersionExA VirtualQuery DeleteCriticalSection WideCharToMultiByte GetSystemDirectoryA CreateMutexA GetCurrentProcess GetCurrentProcessId GetLastError Sleep WaitForSingleObject GetCurrentThreadId VirtualAlloc MultiByteToWideChar GetLocalTime InitializeCriticalSection IsDBCSLeadByte GetTickCount LeaveCriticalSection GetTempFileNameA QueryPerformanceCounter GlobalAlloc GetModuleFileNameA MoveFileA LoadResource VirtualProtectEx SetUnhandledExceptionFilter TerminateProcess DeleteFileA lstrlenA FindResourceExA CreateFileA SizeofResource EnterCriticalSection lstrcmpiA ReadFile ReleaseMutex GetTempPathA HeapDestroy FreeLibrary VirtualProtect GetModuleHandleA UnhandledExceptionFilter GetFileSize SetFilePointer GetProcAddress WriteFile

msvcrt

memset _callnewh _amsg_exit _XcptFilter memcpy atol _vsnprintf realloc free malloc _initterm

user32

LoadStringA CharPrevA CharNextA

Sharing

General

Malware Config

Signatures

File Explorer

850497ed0130a5247a6c4650bca0af4be152be4cb88cca142b88df6fed854cd3

advapi32

kernel32

msvcrt

user32