ef81d6713174343164ce8ee1593d4665

General

Target
ef81d6713174343164ce8ee1593d4665
Size 356KB
Sample220521-c1ad3sege3
SHA256 4c75afb450e0227ad3f18bbf38377de95e322adb72adeb74c3d57056a4a49d13
MD5 ef81d6713174343164ce8ee1593d4665
SHA1 8e3763bbfe83e911a20f0d3326f3d9665d988eb7
SHA512 d3e714e6502cac2a5410e672b6663e61611acfa45ed3d6fc08fedc1c18b0f28f8df08fffc0bf3f0a786665c18202ecced33c68313951a50eeb5d974059c6c29b
SSDEEP 3072:JI0AM0yQkR9M6lglELtJUNjiWGyWcTU0JUiA2tqZ4IvUlDAj7UOjVifSwHEDQVLK:i5MR9M6y3TdRIvgMSS3AyUrhYu3j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ef81d6713174343164ce8ee1593d4665

.dll 356KB

ef81d6713174343164ce8ee1593d4665

IMPHASH ad5c5b0f3e2e211c551f3b5059e614d7
SHA256 4c75afb450e0227ad3f18bbf38377de95e322adb72adeb74c3d57056a4a49d13
MD5 ef81d6713174343164ce8ee1593d4665
SHA1 8e3763bbfe83e911a20f0d3326f3d9665d988eb7
SHA512 d3e714e6502cac2a5410e672b6663e61611acfa45ed3d6fc08fedc1c18b0f28f8df08fffc0bf3f0a786665c18202ecced33c68313951a50eeb5d974059c6c29b
SSDEEP 3072:JI0AM0yQkR9M6lglELtJUNjiWGyWcTU0JUiA2tqZ4IvUlDAj7UOjVifSwHEDQVLK:i5MR9M6y3TdRIvgMSS3AyUrhYu3j
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

13696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTimeFormatA GetDateFormatA GetThreadLocale FileTimeToSystemTime VirtualAlloc ExitProcess CloseHandle CreateFileW SetStdHandle GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx EncodePointer FlsGetValue FlsAlloc FlsFree SetLastError GetLastError HeapSize HeapValidate IsBadReadPtr DecodePointer GetProcAddress GetModuleHandleW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation GetVersion HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc GetModuleFileNameW HeapReAlloc HeapQueryInformation HeapFree WriteFile LoadLibraryW LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW OutputDebugStringW RaiseException RtlPcToFileHeader SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

MessageBoxA

ole32

CoTaskMemFree CoTaskMemAlloc CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

ef81d6713174343164ce8ee1593d4665

kernel32

user32

ole32