0597ef63154d8ecb2367929542ac98f2

General

Target
0597ef63154d8ecb2367929542ac98f2
Size 586KB
Sample220513-jldaragcek
SHA256 2e7a2dcb0cc817ca82fe3104b84c664843bfcb86e787685893b0fccb3e3eed28
MD5 0597ef63154d8ecb2367929542ac98f2
SHA1 a17c22e1024a2a166d5f47d10d510d419064fd0e
SHA512 da791d981e5dae801a76bf47e9db1489881558d93cf39b4d7f83c04146e50ac3819a64db598bc2deb5952eaa20535b0b027ca258e963fec712954325bb17aee2
SSDEEP 12288:pb33gy9o7ZCxFYen7/s4Gpmil6o4ASwvHmc8R6BSxCMRstYfs2MKW7MSLTeiZfgM:pb33gy9o7ZCxFYe7/s4Gpmil6o4ASwvl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0597ef63154d8ecb2367929542ac98f2

.dll 586KB

0597ef63154d8ecb2367929542ac98f2

IMPHASH f05c93e8ef80ace9b0c28c078beee96c
SHA256 2e7a2dcb0cc817ca82fe3104b84c664843bfcb86e787685893b0fccb3e3eed28
MD5 0597ef63154d8ecb2367929542ac98f2
SHA1 a17c22e1024a2a166d5f47d10d510d419064fd0e
SHA512 da791d981e5dae801a76bf47e9db1489881558d93cf39b4d7f83c04146e50ac3819a64db598bc2deb5952eaa20535b0b027ca258e963fec712954325bb17aee2
SSDEEP 12288:pb33gy9o7ZCxFYen7/s4Gpmil6o4ASwvHmc8R6BSxCMRstYfs2MKW7MSLTeiZfgM:pb33gy9o7ZCxFYe7/s4Gpmil6o4ASwvl
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

271120

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetLastError SetLastError GetCurrentThread EncodePointer DecodePointer GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW RtlUnwindEx IsValidCodePage GetACP GetOEMCP GetCPInfo EnterCriticalSection LeaveCriticalSection FatalAppExitA WriteFile GetModuleFileNameW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW OutputDebugStringW HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW

ole32

CoTaskMemFree CoLoadLibrary CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

0597ef63154d8ecb2367929542ac98f2

kernel32

ole32