8a4096b0618f8a307611d191e49c4cfe

General

Target
8a4096b0618f8a307611d191e49c4cfe
Size 580KB
Sample220513-fe4mksfear
SHA256 e5dca6dbcfa4664c96e65a3ab9c1a210d120cb3e81f32d286aeb2b3cd66e6655
MD5 8a4096b0618f8a307611d191e49c4cfe
SHA1 e0f7eddb1a9ca84cc2e6f8e0896dad8395d69cd8
SHA512 57d4f9c45af642b17b62f708370a1d2a3075c57194434ea6ecd30e24967147a40e50d5a441703f637fdd76eb99139ace94cbfa8b32984e592b5c4bf1e3a64968
SSDEEP 12288:cb33gy9o7ZCxFYen7/s4Gpmil6o4ASwvHmc8R6BSxCMRstYfs2MdfHSLTeRGBgdM:cb33gy9o7ZCxFYe7/s4Gpmil6o4ASwva
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8a4096b0618f8a307611d191e49c4cfe

.dll 580KB

8a4096b0618f8a307611d191e49c4cfe

IMPHASH f05c93e8ef80ace9b0c28c078beee96c
SHA256 e5dca6dbcfa4664c96e65a3ab9c1a210d120cb3e81f32d286aeb2b3cd66e6655
MD5 8a4096b0618f8a307611d191e49c4cfe
SHA1 e0f7eddb1a9ca84cc2e6f8e0896dad8395d69cd8
SHA512 57d4f9c45af642b17b62f708370a1d2a3075c57194434ea6ecd30e24967147a40e50d5a441703f637fdd76eb99139ace94cbfa8b32984e592b5c4bf1e3a64968
SSDEEP 12288:cb33gy9o7ZCxFYen7/s4Gpmil6o4ASwvHmc8R6BSxCMRstYfs2MdfHSLTeRGBgdM:cb33gy9o7ZCxFYe7/s4Gpmil6o4ASwva
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

271120

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetLastError SetLastError GetCurrentThread EncodePointer DecodePointer GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW RtlUnwindEx IsValidCodePage GetACP GetOEMCP GetCPInfo EnterCriticalSection LeaveCriticalSection FatalAppExitA WriteFile GetModuleFileNameW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW OutputDebugStringW HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW

ole32

CoTaskMemFree CoLoadLibrary CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

8a4096b0618f8a307611d191e49c4cfe

kernel32

ole32