0aa5dda00c5eebb369c721904d443584

General

Target
0aa5dda00c5eebb369c721904d443584
Size 465KB
Sample220519-bwtfqagdc4
SHA256 1d86bb5faa0f22f735f9e1b52f85e7439e712f500dd21696811d732ab63fdd9e
MD5 0aa5dda00c5eebb369c721904d443584
SHA1 eb77bf656584c8e393c750f0f70dc2a2f993e259
SHA512 b9987292244d78f8864e42613ebe316fca6ee2d0f036710c067b6ef0d0db1686eec60e2e604e4fe2163c8926e663ca0e97306b3f1a0213d14b489a1601eded54
SSDEEP 12288:uS4BnAed8BK2o0aRa5aoE0ZcKTME+ZvDV5ejhF0E3hobx:R4BnANKoa34dmyL0E3Q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0aa5dda00c5eebb369c721904d443584

.dll 465KB

0aa5dda00c5eebb369c721904d443584

IMPHASH dfaffb91ffd6ccb2db2dd7341b2d718f
SHA256 1d86bb5faa0f22f735f9e1b52f85e7439e712f500dd21696811d732ab63fdd9e
MD5 0aa5dda00c5eebb369c721904d443584
SHA1 eb77bf656584c8e393c750f0f70dc2a2f993e259
SHA512 b9987292244d78f8864e42613ebe316fca6ee2d0f036710c067b6ef0d0db1686eec60e2e604e4fe2163c8926e663ca0e97306b3f1a0213d14b489a1601eded54
SSDEEP 12288:uS4BnAed8BK2o0aRa5aoE0ZcKTME+ZvDV5ejhF0E3hobx:R4BnANKoa34dmyL0E3Q
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

123580

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualAlloc SetEndOfFile CreateFileW ReadConsoleW WriteConsoleW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection Sleep EncodePointer DecodePointer GetLocaleInfoEx MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError HeapFree GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo HeapAlloc IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW GetProcAddress AreFileApisANSI HeapSize SetLastError IsDebuggerPresent GetProcessHeap CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType InitOnceExecuteOnce GetStartupInfoW ReadFile SetFilePointerEx GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetUserDefaultLocaleName LCMapStringEx IsValidLocaleName EnumSystemLocalesEx HeapReAlloc SetFilePointer OutputDebugStringW LoadLibraryExW LoadLibraryW SetStdHandle

ole32

CoTaskMemFree CoTaskMemAlloc CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

0aa5dda00c5eebb369c721904d443584

kernel32

ole32