6e1fd1d08ebda66a77a741ea528fc3c3

General

Target
6e1fd1d08ebda66a77a741ea528fc3c3
Size 364KB
Sample220516-va38ksbac8
SHA256 c74d553855375d2cce2dacd7fedef4e69ad63c1f2a0d89139bf0d440e166cb1a
MD5 6e1fd1d08ebda66a77a741ea528fc3c3
SHA1 0511376a48efa8dec73c574d53f91258e00775a0
SHA512 fa9bf60889bc408164926cb39201e80735847612fa32cb1310313335815919c84db789fac014a05179ab820cf83b3f5e777eee9394b66eede45258671fe68522
SSDEEP 6144:EbmRW/X22TR72tKbxGeZkesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/ZpRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6e1fd1d08ebda66a77a741ea528fc3c3

.dll 364KB

6e1fd1d08ebda66a77a741ea528fc3c3

IMPHASH 073e9094df66da2c3d6e17b86c2a33ec
SHA256 c74d553855375d2cce2dacd7fedef4e69ad63c1f2a0d89139bf0d440e166cb1a
MD5 6e1fd1d08ebda66a77a741ea528fc3c3
SHA1 0511376a48efa8dec73c574d53f91258e00775a0
SHA512 fa9bf60889bc408164926cb39201e80735847612fa32cb1310313335815919c84db789fac014a05179ab820cf83b3f5e777eee9394b66eede45258671fe68522
SSDEEP 6144:EbmRW/X22TR72tKbxGeZkesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/ZpRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

30960

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc CreateFileW ReadConsoleW WriteConsoleW SetStdHandle EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx HeapAlloc GetCPInfo IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap GetModuleHandleExW HeapSize GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WriteFile GetModuleFileNameW GetACP CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidCodePage GetOEMCP HeapReAlloc LoadLibraryExW OutputDebugStringW

ole32

CoTaskMemFree CoLoadLibrary CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

6e1fd1d08ebda66a77a741ea528fc3c3

kernel32

ole32