5639dbfee776685652757e6ef04098a0

General

Target
5639dbfee776685652757e6ef04098a0
Size 465KB
Sample220517-svq3msgfcr
SHA256 4f1eb35a7e277488c00350d392687ee12d49805d004db624d3dc229e4c9d8fae
MD5 5639dbfee776685652757e6ef04098a0
SHA1 bf84ff83435b9b79040ced9d90a83f2b04c9a876
SHA512 b777e6a9280b70dfb0ec24cc2f879aecdbf81ac361c77770cde4c9803861cc18d482bfe159319210691acc2b04c92101cb0cd711cf6a8e37bb377daa2fee0b5e
SSDEEP 12288:uS4BnAed8BK2o0aKa5aoE0ZcKTME+ZvDV5ejhF0E3hobx:R4BnANKZa34dmyL0E3Q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5639dbfee776685652757e6ef04098a0

.dll 465KB

5639dbfee776685652757e6ef04098a0

IMPHASH dfaffb91ffd6ccb2db2dd7341b2d718f
SHA256 4f1eb35a7e277488c00350d392687ee12d49805d004db624d3dc229e4c9d8fae
MD5 5639dbfee776685652757e6ef04098a0
SHA1 bf84ff83435b9b79040ced9d90a83f2b04c9a876
SHA512 b777e6a9280b70dfb0ec24cc2f879aecdbf81ac361c77770cde4c9803861cc18d482bfe159319210691acc2b04c92101cb0cd711cf6a8e37bb377daa2fee0b5e
SSDEEP 12288:uS4BnAed8BK2o0aKa5aoE0ZcKTME+ZvDV5ejhF0E3hobx:R4BnANKZa34dmyL0E3Q
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

123580

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc SetEndOfFile CreateFileW ReadConsoleW WriteConsoleW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection Sleep EncodePointer DecodePointer GetLocaleInfoEx MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError HeapFree GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo HeapAlloc IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW GetProcAddress AreFileApisANSI HeapSize SetLastError IsDebuggerPresent GetProcessHeap CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType InitOnceExecuteOnce GetStartupInfoW ReadFile SetFilePointerEx GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetUserDefaultLocaleName LCMapStringEx IsValidLocaleName EnumSystemLocalesEx HeapReAlloc SetFilePointer OutputDebugStringW LoadLibraryExW LoadLibraryW SetStdHandle

ole32

CoTaskMemFree CoTaskMemAlloc CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

5639dbfee776685652757e6ef04098a0

kernel32

ole32