ac4d0a334e4a07962c48aa24b935cb82

General

Target
ac4d0a334e4a07962c48aa24b935cb82
Size 417KB
Sample220615-a6b4radbcj
SHA256 d8f5a509c04e6d3aa303945782bcb2f02e93f8c93ed720429e9df2df51689c3d
MD5 ac4d0a334e4a07962c48aa24b935cb82
SHA1 45aa177100ac41bc42b95392ba9876de79795299
SHA512 ddca839d5080f083545420caf3178022e18e832c3ed415818f770284325091ab28a0a6812ac9f105c8d3c4ecd0cb21f8ff19bee6dd7af060b0865a490c43927d
SSDEEP 6144:lv1L3IhB7K9bu4j33ULJTqnE5AEpc3gb2KfRlG414kl+VUCpn6g8DLWueLJ/Fr5D:lV79buIHULolKfRlD+r6gqIltr5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ac4d0a334e4a07962c48aa24b935cb82

.dll 417KB

ac4d0a334e4a07962c48aa24b935cb82

IMPHASH ef9476d0fbfc6b40d5643f82c26da05e
SHA256 d8f5a509c04e6d3aa303945782bcb2f02e93f8c93ed720429e9df2df51689c3d
MD5 ac4d0a334e4a07962c48aa24b935cb82
SHA1 45aa177100ac41bc42b95392ba9876de79795299
SHA512 ddca839d5080f083545420caf3178022e18e832c3ed415818f770284325091ab28a0a6812ac9f105c8d3c4ecd0cb21f8ff19bee6dd7af060b0865a490c43927d
SSDEEP 6144:lv1L3IhB7K9bu4j33ULJTqnE5AEpc3gb2KfRlG414kl+VUCpn6g8DLWueLJ/Fr5D:lV79buIHULolKfRlD+r6gqIltr5
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

88696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

TlsGetValue CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW GetModuleFileNameW WriteFile EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

ac4d0a334e4a07962c48aa24b935cb82

ws2_32

kernel32

ole32