a561d800086abf1a6616e306b1a01ab5

General

Target
a561d800086abf1a6616e306b1a01ab5
Size 364KB
Sample220517-d4rm7sefd2
SHA256 c58c7a7468d8a326160627281cd0dd96ed91af6d18a6887ccb0325475f8a2b73
MD5 a561d800086abf1a6616e306b1a01ab5
SHA1 5920f040833c635b4e3128d01c469e3d3a92da20
SHA512 6b437662d4bc42d8e278dfdcfbc004677e74cd69cda7dc63ea6505058d09aefbcfe6e69d1ff0d10f6b699180f4717199642007ff4bd34970a8ea4c50860409aa
SSDEEP 6144:EbmRW/X22TR72tKbxGeGkesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/GpRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a561d800086abf1a6616e306b1a01ab5

.dll 364KB

a561d800086abf1a6616e306b1a01ab5

IMPHASH 073e9094df66da2c3d6e17b86c2a33ec
SHA256 c58c7a7468d8a326160627281cd0dd96ed91af6d18a6887ccb0325475f8a2b73
MD5 a561d800086abf1a6616e306b1a01ab5
SHA1 5920f040833c635b4e3128d01c469e3d3a92da20
SHA512 6b437662d4bc42d8e278dfdcfbc004677e74cd69cda7dc63ea6505058d09aefbcfe6e69d1ff0d10f6b699180f4717199642007ff4bd34970a8ea4c50860409aa
SSDEEP 6144:EbmRW/X22TR72tKbxGeGkesyj1BQr6blJLUDblVpM54WWBKWuSIZ5ib0wj:E42Gi7/GpRBQrgI5M54riZYbf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

30960

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc CreateFileW ReadConsoleW WriteConsoleW SetStdHandle EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx HeapAlloc GetCPInfo IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap GetModuleHandleExW HeapSize GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WriteFile GetModuleFileNameW GetACP CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidCodePage GetOEMCP HeapReAlloc LoadLibraryExW OutputDebugStringW

ole32

CoTaskMemFree CoLoadLibrary CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

a561d800086abf1a6616e306b1a01ab5

kernel32

ole32