68d6e93ebcde4b8b627090176cbe2e8a

General

Target
68d6e93ebcde4b8b627090176cbe2e8a
Size 443KB
Sample220613-becrmshba3
SHA256 39ed140a2f5b8e32cda2093b04e47b32f18c9531c28a84eeab9cdfe181bb754b
MD5 68d6e93ebcde4b8b627090176cbe2e8a
SHA1 9365200ac949ba66e8738667f86791ff107af4fb
SHA512 ecc9a3c65003eecc336e51c73a76c5cff45e423070e311647ff0f00bd9142222d9d3219d2dc5fc2d7d2d7c0ec9803e92a065464ffcb045b3e64176996758dd08
SSDEEP 6144:dfqTTASBBe0ItWMEGMfJGJ5NIV1l8/wL9xDJD52HFWO5zgLgUg:dbSFjJKIV1l8YxhJFWMUN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

68d6e93ebcde4b8b627090176cbe2e8a

.dll 443KB

68d6e93ebcde4b8b627090176cbe2e8a

IMPHASH c8ac210c5f02761cdd749a050403b70e
SHA256 39ed140a2f5b8e32cda2093b04e47b32f18c9531c28a84eeab9cdfe181bb754b
MD5 68d6e93ebcde4b8b627090176cbe2e8a
SHA1 9365200ac949ba66e8738667f86791ff107af4fb
SHA512 ecc9a3c65003eecc336e51c73a76c5cff45e423070e311647ff0f00bd9142222d9d3219d2dc5fc2d7d2d7c0ec9803e92a065464ffcb045b3e64176996758dd08
SSDEEP 6144:dfqTTASBBe0ItWMEGMfJGJ5NIV1l8/wL9xDJD52HFWO5zgLgUg:dbSFjJKIV1l8YxhJFWMUN
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

15996

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetEvent WaitForSingleObjectEx GetModuleHandleW GetLastError GetProcAddress GlobalFree CreateEventExW CloseHandle HeapAlloc HeapFree GetProcessHeap VirtualAlloc WriteConsoleW SetStdHandle HeapSize LoadLibraryW OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringEx GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection RtlUnwindEx RtlLookupFunctionEntry SetLastError ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess Sleep IsValidCodePage GetACP GetOEMCP GetCPInfo RtlPcToFileHeader RaiseException WriteFile GetModuleFileNameW LoadLibraryExW HeapReAlloc GetStringTypeW CreateFileW

user32

ShowWindow

ole32

CoLoadLibrary

winhttp

WinHttpOpen WinHttpQueryHeaders WinHttpConnect WinHttpSendRequest WinHttpOpenRequest WinHttpGetProxyForUrl WinHttpSetStatusCallback WinHttpCloseHandle WinHttpGetIEProxyConfigForCurrentUser WinHttpSetOption WinHttpCrackUrl WinHttpReceiveResponse

Sharing

General

Malware Config

Signatures

File Explorer

68d6e93ebcde4b8b627090176cbe2e8a

kernel32

user32

ole32

winhttp