8b73ea9d4031c5ea7c73b175bf9c707e

General

Target
8b73ea9d4031c5ea7c73b175bf9c707e
Size 757KB
Sample220519-swwphsbhdm
SHA256 d9e021e8c1326ac42e26969c1e75405bd4bcd5dab6d216a79392ad5a65bb3886
MD5 8b73ea9d4031c5ea7c73b175bf9c707e
SHA1 807fe8e83acf22f0f96cf0ceb36700257f6ea899
SHA512 a0de5e5c17fc1c08178dadf5ce1732072f4e407c0d6a8e4bb8be6bed0b48146b002b4d469f7a1b4d8bbd36256e8a45768abc5fa8f49599b16f9ca771ec05d851
SSDEEP 6144:I1mJQ5QHOxSna48xIjok7FEeS+v8ZzuioLT42TUDorWHht/vNpdWvp7CK/L+An0V:XQ56uUa4e8oAWzYqQ+tXGEp24Eh+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8b73ea9d4031c5ea7c73b175bf9c707e

.dll 757KB

8b73ea9d4031c5ea7c73b175bf9c707e

IMPHASH a49a48a9de10e6f0f9cf3b2277487df3
SHA256 d9e021e8c1326ac42e26969c1e75405bd4bcd5dab6d216a79392ad5a65bb3886
MD5 8b73ea9d4031c5ea7c73b175bf9c707e
SHA1 807fe8e83acf22f0f96cf0ceb36700257f6ea899
SHA512 a0de5e5c17fc1c08178dadf5ce1732072f4e407c0d6a8e4bb8be6bed0b48146b002b4d469f7a1b4d8bbd36256e8a45768abc5fa8f49599b16f9ca771ec05d851
SSDEEP 6144:I1mJQ5QHOxSna48xIjok7FEeS+v8ZzuioLT42TUDorWHht/vNpdWvp7CK/L+An0V:XQ56uUa4e8oAWzYqQ+tXGEp24Eh+
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

280152

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoTaskMemAlloc CoTaskMemFree CoLoadLibrary

kernel32

QueryPerformanceCounter CreateFileW ReadConsoleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection Sleep WideCharToMultiByte GetLocaleInfoEx MultiByteToWideChar GetStringTypeW GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError HeapFree InitializeCriticalSectionAndSpinCount GetCPInfo HeapAlloc IsProcessorFeaturePresent IsDebuggerPresent ExitProcess GetModuleHandleExW GetProcAddress HeapSize GetStdHandle WriteFile GetModuleFileNameW SetLastError GetProcessHeap GetFileType InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidCodePage GetACP GetOEMCP GetUserDefaultLocaleName LCMapStringEx IsValidLocaleName EnumSystemLocalesEx HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW SetStdHandle WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

8b73ea9d4031c5ea7c73b175bf9c707e

ole32

kernel32