QBbnHMWRxcs5J[.]dll

General

Target
QBbnHMWRxcs5J.dll
Size 364KB
Sample220516-wlcenseedn
SHA256 5f06589caa3aed7818158b76a908e826e12f4f6ae47741fd264570a11bbfc308
MD5 95abd457fd77ae31bbc2e05425eaf04f
SHA1 d2040e63d1ca2f09a3f904dc3cde9568fd4cc06c
SHA512 f83e0c6f2fd64158646a03168e315e9f782947d7c6f7fb79facd1008e51ecd4f963299d31bbcabfffef12ab6222d1141f76bbfdf283fb498111c9fe3677652be
SSDEEP 6144:EbmRW/X22TR72tKbxGeCEkesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/BpRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

QBbnHMWRxcs5J.dll

.dll 364KB

QBbnHMWRxcs5J.dll

IMPHASH 073e9094df66da2c3d6e17b86c2a33ec
SHA256 5f06589caa3aed7818158b76a908e826e12f4f6ae47741fd264570a11bbfc308
MD5 95abd457fd77ae31bbc2e05425eaf04f
SHA1 d2040e63d1ca2f09a3f904dc3cde9568fd4cc06c
SHA512 f83e0c6f2fd64158646a03168e315e9f782947d7c6f7fb79facd1008e51ecd4f963299d31bbcabfffef12ab6222d1141f76bbfdf283fb498111c9fe3677652be
SSDEEP 6144:EbmRW/X22TR72tKbxGeCEkesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/BpRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

30960

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc CreateFileW ReadConsoleW WriteConsoleW SetStdHandle EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx HeapAlloc GetCPInfo IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap GetModuleHandleExW HeapSize GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WriteFile GetModuleFileNameW GetACP CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidCodePage GetOEMCP HeapReAlloc LoadLibraryExW OutputDebugStringW

ole32

CoTaskMemFree CoLoadLibrary CoTaskMemAlloc

Sharing