f166e0f5fe3c9838615a0c59c879bd80

General

Target
f166e0f5fe3c9838615a0c59c879bd80
Size 356KB
Sample220521-defjmsafck
SHA256 fa2eca062ceb04f1772bde21ba673088db39343ad17dca5cc830af920be92c81
MD5 f166e0f5fe3c9838615a0c59c879bd80
SHA1 bdbbac7079b67ef3b8914cb8c332052a09ce15a8
SHA512 a9e7db5420b0a46e11f57dbf23313aa840c9c93d872a3681d6fc0edee734c3c3008f810bffe9e985c3ac0f981988b3518b3a5145d093293822ea4189dd9c1ef7
SSDEEP 3072:JI0AM0yQkR9M6lglELtJUNjiWGyWcTK0JUiA2tqZ4IvUlDAj7UOjVifSwHEDQVLK:i5MR9M6y3TXRIvgMSS3AyUrhYu3j
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f166e0f5fe3c9838615a0c59c879bd80

.dll 356KB

f166e0f5fe3c9838615a0c59c879bd80

IMPHASH ad5c5b0f3e2e211c551f3b5059e614d7
SHA256 fa2eca062ceb04f1772bde21ba673088db39343ad17dca5cc830af920be92c81
MD5 f166e0f5fe3c9838615a0c59c879bd80
SHA1 bdbbac7079b67ef3b8914cb8c332052a09ce15a8
SHA512 a9e7db5420b0a46e11f57dbf23313aa840c9c93d872a3681d6fc0edee734c3c3008f810bffe9e985c3ac0f981988b3518b3a5145d093293822ea4189dd9c1ef7
SSDEEP 3072:JI0AM0yQkR9M6lglELtJUNjiWGyWcTK0JUiA2tqZ4IvUlDAj7UOjVifSwHEDQVLK:i5MR9M6y3TXRIvgMSS3AyUrhYu3j
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

13696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTimeFormatA GetDateFormatA GetThreadLocale FileTimeToSystemTime VirtualAlloc ExitProcess CloseHandle CreateFileW SetStdHandle GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx EncodePointer FlsGetValue FlsAlloc FlsFree SetLastError GetLastError HeapSize HeapValidate IsBadReadPtr DecodePointer GetProcAddress GetModuleHandleW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation GetVersion HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc GetModuleFileNameW HeapReAlloc HeapQueryInformation HeapFree WriteFile LoadLibraryW LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW OutputDebugStringW RaiseException RtlPcToFileHeader SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

MessageBoxA

ole32

CoTaskMemFree CoTaskMemAlloc CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

f166e0f5fe3c9838615a0c59c879bd80

kernel32

user32

ole32