2a1b9e7275501500c491945a673055b7

General

Target
2a1b9e7275501500c491945a673055b7
Size 364KB
Sample220516-2rmqgsfadj
SHA256 4c7aff9ae4f265a56b8a7ce9457eae03b15cd5b67fc8c401026e714c5806ccd6
MD5 2a1b9e7275501500c491945a673055b7
SHA1 9725739430fc3088eb85d140a679ba29ae0f7b7e
SHA512 9ab9f0ca1ec0b5aae3dc9e44204e4d72488a523fb34a1176af488fd15659265cc6d759172166cd1fc0d00e432637fe3fd1a51b21cd2fe842b962bf19066dac9b
SSDEEP 6144:EbmRW/X22TR72tKbxGe4kesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/4pRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2a1b9e7275501500c491945a673055b7

.dll 364KB

2a1b9e7275501500c491945a673055b7

IMPHASH 073e9094df66da2c3d6e17b86c2a33ec
SHA256 4c7aff9ae4f265a56b8a7ce9457eae03b15cd5b67fc8c401026e714c5806ccd6
MD5 2a1b9e7275501500c491945a673055b7
SHA1 9725739430fc3088eb85d140a679ba29ae0f7b7e
SHA512 9ab9f0ca1ec0b5aae3dc9e44204e4d72488a523fb34a1176af488fd15659265cc6d759172166cd1fc0d00e432637fe3fd1a51b21cd2fe842b962bf19066dac9b
SSDEEP 6144:EbmRW/X22TR72tKbxGe4kesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/4pRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

30960

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc CreateFileW ReadConsoleW WriteConsoleW SetStdHandle EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx HeapAlloc GetCPInfo IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap GetModuleHandleExW HeapSize GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WriteFile GetModuleFileNameW GetACP CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidCodePage GetOEMCP HeapReAlloc LoadLibraryExW OutputDebugStringW

ole32

CoTaskMemFree CoLoadLibrary CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

2a1b9e7275501500c491945a673055b7

kernel32

ole32