28d983dea2c8f026bd0038452315f321

Sharing

Copy URL Twitter E-mail

General

Target
28d983dea2c8f026bd0038452315f321
Size 649KB
Sample220607-qsrv2sehd2
SHA256 d78e2271694831e1984ff2832c712dfea62352b2a30b1fe11d75b8e4b5506884
MD5 28d983dea2c8f026bd0038452315f321
SHA1 0e02c920d3e250af8c400161be4b1e5c4f3c1e24
SHA512 3ac83d0d0bd3c6c258d96742bad5707f4db0fcf3de4edf43ede5f514c064eceabecce03d725e331b90585a4dc8e484a467540ae2da7db8fab64c1bed3b412cec
SSDEEP 12288:AZA6cc2TVra6d9aaNlm+TrzN2oYF1VC4NKy8YN6fQLYylOjTlTkZBVkU8QNGa:AZA6cc2Vd9aaOoQWZy8YYfQLYylbnkUJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

28d983dea2c8f026bd0038452315f321

.dll 649KB

28d983dea2c8f026bd0038452315f321

IMPHASH bb56b51f4e356fbc99808771d6a404b5
SHA256 d78e2271694831e1984ff2832c712dfea62352b2a30b1fe11d75b8e4b5506884
MD5 28d983dea2c8f026bd0038452315f321
SHA1 0e02c920d3e250af8c400161be4b1e5c4f3c1e24
SHA512 3ac83d0d0bd3c6c258d96742bad5707f4db0fcf3de4edf43ede5f514c064eceabecce03d725e331b90585a4dc8e484a467540ae2da7db8fab64c1bed3b412cec
SSDEEP 12288:AZA6cc2TVra6d9aaNlm+TrzN2oYF1VC4NKy8YN6fQLYylOjTlTkZBVkU8QNGa:AZA6cc2Vd9aaOoQWZy8YYfQLYylbnkUJ
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

4800

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateDirectoryA CreateFileA CreateFileW DeleteFileA EnterCriticalSection ExitProcess FreeEnvironmentStringsA GetACP GetCPInfo GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetEnvironmentStrings GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemInfo GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetVersion HeapAlloc HeapFree IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LocalFileTimeToFileTime MultiByteToWideChar RaiseException ReadFile RemoveDirectoryA RemoveVectoredExceptionHandler RtlCaptureContext SetConsoleCtrlHandler SetEndOfFile SetFilePointer SetFileTime SetHandleCount SetLastError SetThreadLocale SystemTimeToFileTime TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualAlloc VirtualFree VirtualQuery WideCharToMultiByte WriteFile RtlRestoreContext RtlUnwindEx

user32

EnumThreadWindows MessageBoxA wsprintfA

ole32

CoLoadLibrary

Name

.text

Size

296KB

Virtual Size

296KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

55KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

195B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

158KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ