bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281

Sharing

Copy URL Twitter E-mail

General

Target
bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281
Size 552KB
Sample220215-hsn56acad4
SHA256 bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281
MD5 791779361e8db64ec7fbeb8b82d68ce7
SHA1 8632bff9f308fa57ae5bd1aad56b5ec8ff91f466
SHA512 da4b1b98c6d190311cc5df10c91560a2818d8aa1707d9d77a8fe4275d99766ff29f3d39588b200986f3d0e5eb001a72b5b459f1e95e1e34d875ceb531d6079b4
SSDEEP 12288:1p5lV8LxIGxW79Bnoe7WlQg80K8cb7rsO:1zMOGxWZBnXtg6d3rb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281

.dll 552KB

bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281

IMPHASH b5a81cca6434169cd57fee19df69c17e
SHA256 bc6a441a3036c1310886b671943e487d47f2c7d1b4bd125d7b0cf0f3090b8281
MD5 791779361e8db64ec7fbeb8b82d68ce7
SHA1 8632bff9f308fa57ae5bd1aad56b5ec8ff91f466
SHA512 da4b1b98c6d190311cc5df10c91560a2818d8aa1707d9d77a8fe4275d99766ff29f3d39588b200986f3d0e5eb001a72b5b459f1e95e1e34d875ceb531d6079b4
SSDEEP 12288:1p5lV8LxIGxW79Bnoe7WlQg80K8cb7rsO:1zMOGxWZBnXtg6d3rb
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

125108

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SwitchToThread GetTickCount GetCommandLineW GetOEMCP GetUserDefaultLangID SetFileApisToOEM GetSystemDefaultUILanguage GetThreadErrorMode GetEnvironmentStringsW GetThreadLocale IsDebuggerPresent TlsAlloc GetCommandLineA GetCurrentThreadId GetACP GetCurrentProcess GetLogicalDrives GetLargePageMinimum FlushProcessWriteBuffers RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection DecodePointer MultiByteToWideChar LoadResource GetSystemDefaultLangID FindResourceW GetModuleHandleW GetProcAddress LoadLibraryExW GetModuleFileNameW lstrcmpiW FreeLibrary WriteConsoleW CreateFileW ReadConsoleW SetStdHandle FreeEnvironmentStringsW IsValidCodePage FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale SetFilePointerEx GetConsoleMode GetProcessHeap UnregisterApplicationRecoveryCallback CloseHandle ReadFile FindClose FindNextFileA GetTickCount64 SizeofResource LoadLibraryA GetConsoleCP WriteFile FlushFileBuffers HeapSize GetFileType GetStdHandle HeapFree HeapReAlloc HeapAlloc GetModuleFileNameA GetModuleHandleExW ExitProcess InterlockedFlushSList RtlUnwindEx RtlPcToFileHeader OutputDebugStringW GetCPInfo GetStringTypeW GetLocaleInfoW EnterCriticalSection LeaveCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead WideCharToMultiByte EncodePointer SetLastError InitializeCriticalSectionAndSpinCount TlsGetValue TlsSetValue TlsFree LCMapStringW

user32

CloseClipboard GetMessageTime GetForegroundWindow GetMessageExtraInfo GetCursor CreateMenu GetKBCodePage AnyPopup GetActiveWindow GetClipboardSequenceNumber EmptyClipboard GetShellWindow InSendMessage CharNextW DestroyCaret

gdi32

GdiFlush

advapi32

RegSetValueExW RegEnumKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW RegQueryInfoKeyW

shell32

InitNetworkAddressControl

ole32

CoUninitialize CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoTaskMemFree CoFreeUnusedLibraries OleUninitialize

oleaut32

VarUI4FromStr

Name

.text

Size

239KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

206KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1024B

Virtual Size

788B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ