c6ee3f6899a8b201cc4237f4dcb0bf1a

General

Target
c6ee3f6899a8b201cc4237f4dcb0bf1a
Size 757KB
Sample220519-trclhsccgk
SHA256 0488446865be8e37efe6dd39b16adc481803bd66711edc4edc548efec00a045e
MD5 c6ee3f6899a8b201cc4237f4dcb0bf1a
SHA1 261c05f92b2ca3da98a279f199efd2b7d1e0ddbb
SHA512 ff1ddf4c4dd1527a6b6c99beb1972370597fd09cfb08367c7d0ba16faa72ec01956d8e3caf9134ef50e27211c434f191bebd5bb08d50dd0d056d30a95082ec5b
SSDEEP 6144:I1mJQ5QHOxSna48xIjok7FEeS+v8ZzuioLT42TUDorWHht5vNpdWvp7CK/L+An0V:XQ56uUa4e8oAWzYqQ+txGEp24Eh+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c6ee3f6899a8b201cc4237f4dcb0bf1a

.dll 757KB

c6ee3f6899a8b201cc4237f4dcb0bf1a

IMPHASH a49a48a9de10e6f0f9cf3b2277487df3
SHA256 0488446865be8e37efe6dd39b16adc481803bd66711edc4edc548efec00a045e
MD5 c6ee3f6899a8b201cc4237f4dcb0bf1a
SHA1 261c05f92b2ca3da98a279f199efd2b7d1e0ddbb
SHA512 ff1ddf4c4dd1527a6b6c99beb1972370597fd09cfb08367c7d0ba16faa72ec01956d8e3caf9134ef50e27211c434f191bebd5bb08d50dd0d056d30a95082ec5b
SSDEEP 6144:I1mJQ5QHOxSna48xIjok7FEeS+v8ZzuioLT42TUDorWHht5vNpdWvp7CK/L+An0V:XQ56uUa4e8oAWzYqQ+txGEp24Eh+
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

280152

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoTaskMemAlloc CoTaskMemFree CoLoadLibrary

kernel32

QueryPerformanceCounter CreateFileW ReadConsoleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection Sleep WideCharToMultiByte GetLocaleInfoEx MultiByteToWideChar GetStringTypeW GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError HeapFree InitializeCriticalSectionAndSpinCount GetCPInfo HeapAlloc IsProcessorFeaturePresent IsDebuggerPresent ExitProcess GetModuleHandleExW GetProcAddress HeapSize GetStdHandle WriteFile GetModuleFileNameW SetLastError GetProcessHeap GetFileType InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidCodePage GetACP GetOEMCP GetUserDefaultLocaleName LCMapStringEx IsValidLocaleName EnumSystemLocalesEx HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW SetStdHandle WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

c6ee3f6899a8b201cc4237f4dcb0bf1a

ole32

kernel32