a0a51950f1af502d4f04343283bcc2a8[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
a0a51950f1af502d4f04343283bcc2a8.dll
Size 588KB
Sample220201-ve5bfahffm
SHA256 8086e227c4b65c33d119a8d8793d71eb679391508df6caef94974a03d9acc310
MD5 a0a51950f1af502d4f04343283bcc2a8
SHA1 1abf06675589c25a68e4a1c6029c712995548395
SHA512 e2838cfde36cceb8ddfe9680b36f1f8de71faa8dc041fc71bfc9003bc594d59196e061cc5e61951c6a5f655e68e3bfc74119a8552858ba58df67d833d6fcf4c7
SSDEEP 12288:Xubfi/F/MoM7AdNToZuSFmssmLoq6ch0qMBoR:XubK/FXM7AdNTXLssmLo+VR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a0a51950f1af502d4f04343283bcc2a8.dll

.dll 588KB

a0a51950f1af502d4f04343283bcc2a8.dll

IMPHASH c174bfdc85dbd8c800d9d456f7209c0d
SHA256 8086e227c4b65c33d119a8d8793d71eb679391508df6caef94974a03d9acc310
MD5 a0a51950f1af502d4f04343283bcc2a8
SHA1 1abf06675589c25a68e4a1c6029c712995548395
SHA512 e2838cfde36cceb8ddfe9680b36f1f8de71faa8dc041fc71bfc9003bc594d59196e061cc5e61951c6a5f655e68e3bfc74119a8552858ba58df67d833d6fcf4c7
SSDEEP 12288:Xubfi/F/MoM7AdNToZuSFmssmLoq6ch0qMBoR:XubK/FXM7AdNTXLssmLo+VR
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

129236

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindFirstFileA FindNextFileA FindClose CreateFileA GetFileSize ReadFile CloseHandle GetProcessHeap GetThreadErrorMode IsDebuggerPresent GetOEMCP GetACP GetSystemDefaultLangID GetCurrentProcess GetLargePageMinimum UnregisterApplicationRecoveryCallback GetEnvironmentStringsW GetCurrentThreadId AreFileApisANSI GetCommandLineA TlsAlloc GetLastError UnregisterApplicationRestart GetCurrentProcessorNumber RaiseException InitializeCriticalSectionEx DeleteCriticalSection DecodePointer GetSystemDirectoryA LoadResource SizeofResource FindResourceW GetModuleHandleW GetProcAddress LoadLibraryExW GetModuleFileNameW lstrcmpiW FreeLibrary FreeEnvironmentStringsW GetCommandLineW IsValidCodePage FindNextFileW FindFirstFileExW ReadConsoleW GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetFilePointerEx GetFileSizeEx HeapReAlloc HeapSize EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType GetStdHandle HeapAlloc HeapFree GetModuleHandleExW ExitProcess TlsFree TlsSetValue GetTickCount64 LoadLibraryA SetStdHandle CreateFileW RtlUnwind WriteConsoleW MultiByteToWideChar TlsGetValue InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList RtlPcToFileHeader RtlUnwindEx OutputDebugStringW GetCPInfo GetStringTypeW LCMapStringEx EncodePointer LeaveCriticalSection EnterCriticalSection WideCharToMultiByte InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter

user32

GetForegroundWindow GetClipboardSequenceNumber GetDesktopWindow IsWow64Message GetFocus SetProcessDPIAware DestroyCaret CreateMenu GetOpenClipboardWindow GetMessageTime GetMessageExtraInfo GetClipboardViewer SetCursor LoadCursorW CharNextW

advapi32

RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW RegQueryValueExA RegOpenKeyExA

shell32

InitNetworkAddressControl

ole32

CoTaskMemRealloc CoTaskMemFree CoTaskMemAlloc OleUninitialize CoUninitialize CoFreeUnusedLibraries CoCreateInstance

oleaut32

VarUI4FromStr

wininet

InternetQueryDataAvailable

Name

.text

Size

260KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

209KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ