b96bd7c7ddaab860f78983520d7e1a40ff3712e8fe61e6dfca2d4d2d3b4a35d0

Sharing

Copy URL Twitter E-mail

General

Target
b96bd7c7ddaab860f78983520d7e1a40ff3712e8fe61e6dfca2d4d2d3b4a35d0
Size 1.2MB
Sample220128-yztxzschd9
SHA256 b96bd7c7ddaab860f78983520d7e1a40ff3712e8fe61e6dfca2d4d2d3b4a35d0
MD5 d5d820422aeb519e2301ebc2ad2d1114
SHA1 757ff5ec3dc53abbb62391b14883ef460f6fd404
SHA512 356fe492d02c4d4c65debfd53af6196a9ed5185e7a6c5f37f7761550668b13608d37ce9b589fa7b30b30584c811885592d6aa9372f7f031c7c4be881905df203
SSDEEP 24576:Ehb8xKyglXPg2hL7KAl4Rk6iGQZ/TZ1BVTQD+qq5lLZGPAD27YfFcX1+TQUc+T:EhKrgSzAl4ODZZy+qq5ebcetHM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b96bd7c7ddaab860f78983520d7e1a40ff3712e8fe61e6dfca2d4d2d3b4a35d0

.dll 1.2MB

b96bd7c7ddaab860f78983520d7e1a40ff3712e8fe61e6dfca2d4d2d3b4a35d0

IMPHASH bca8256fa86986efabdb9bca13d5ef9d
SHA256 b96bd7c7ddaab860f78983520d7e1a40ff3712e8fe61e6dfca2d4d2d3b4a35d0
MD5 d5d820422aeb519e2301ebc2ad2d1114
SHA1 757ff5ec3dc53abbb62391b14883ef460f6fd404
SHA512 356fe492d02c4d4c65debfd53af6196a9ed5185e7a6c5f37f7761550668b13608d37ce9b589fa7b30b30584c811885592d6aa9372f7f031c7c4be881905df203
SSDEEP 24576:Ehb8xKyglXPg2hL7KAl4Rk6iGQZ/TZ1BVTQD+qq5lLZGPAD27YfFcX1+TQUc+T:EhKrgSzAl4ODZZy+qq5ebcetHM
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

1728941

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rtxt0

Size

Virtual Size

855KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rtxt1

Size

915KB

Virtual Size

915KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

b96bd7c7ddaab860f78983520d7e1a40ff3712e8fe61e6dfca2d4d2d3b4a35d0

kernel32

advapi32

shlwapi