67533bdae2e4b138164a13a6407c7dd2

General

Target
67533bdae2e4b138164a13a6407c7dd2
Size 443KB
Sample220613-bdsrgadabn
SHA256 fd86d6acb50a910e9274f776a66aff5005d6d72ff2e824923c4bf2e65e554ecf
MD5 67533bdae2e4b138164a13a6407c7dd2
SHA1 f5c76e85ea0156dd781d31119d9dd33719ee19dc
SHA512 dfa13e554b67c35b094cd6929ef48a4bce40e1ede42f6b097bc05f613e937a5c0e8042974bc93ef7e29bd8a77b67accfedbbd7bd5fdb319199fbb289a7103c43
SSDEEP 6144:dfqTTASBBe0It3MEGMfJGJ5NIV1l8/wL9xDJD52HFWO5zgLgUg:dbSMjJKIV1l8YxhJFWMUN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

67533bdae2e4b138164a13a6407c7dd2

.dll 443KB

67533bdae2e4b138164a13a6407c7dd2

IMPHASH c8ac210c5f02761cdd749a050403b70e
SHA256 fd86d6acb50a910e9274f776a66aff5005d6d72ff2e824923c4bf2e65e554ecf
MD5 67533bdae2e4b138164a13a6407c7dd2
SHA1 f5c76e85ea0156dd781d31119d9dd33719ee19dc
SHA512 dfa13e554b67c35b094cd6929ef48a4bce40e1ede42f6b097bc05f613e937a5c0e8042974bc93ef7e29bd8a77b67accfedbbd7bd5fdb319199fbb289a7103c43
SSDEEP 6144:dfqTTASBBe0It3MEGMfJGJ5NIV1l8/wL9xDJD52HFWO5zgLgUg:dbSMjJKIV1l8YxhJFWMUN
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

15996

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetEvent WaitForSingleObjectEx GetModuleHandleW GetLastError GetProcAddress GlobalFree CreateEventExW CloseHandle HeapAlloc HeapFree GetProcessHeap VirtualAlloc WriteConsoleW SetStdHandle HeapSize LoadLibraryW OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringEx GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection RtlUnwindEx RtlLookupFunctionEntry SetLastError ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess Sleep IsValidCodePage GetACP GetOEMCP GetCPInfo RtlPcToFileHeader RaiseException WriteFile GetModuleFileNameW LoadLibraryExW HeapReAlloc GetStringTypeW CreateFileW

user32

ShowWindow

ole32

CoLoadLibrary

winhttp

WinHttpOpen WinHttpQueryHeaders WinHttpConnect WinHttpSendRequest WinHttpOpenRequest WinHttpGetProxyForUrl WinHttpSetStatusCallback WinHttpCloseHandle WinHttpGetIEProxyConfigForCurrentUser WinHttpSetOption WinHttpCrackUrl WinHttpReceiveResponse

Sharing

General

Malware Config

Signatures

File Explorer

67533bdae2e4b138164a13a6407c7dd2

kernel32

user32

ole32

winhttp