2d1c8982329a301119600c7d3c15e5ff

General

Target
2d1c8982329a301119600c7d3c15e5ff
Size 417KB
Sample220615-ack5kabdgq
SHA256 77fd2bd2efd583beefcaecab763d3c90e6464b0acc32cf9f7f95e3e12afba991
MD5 2d1c8982329a301119600c7d3c15e5ff
SHA1 48c0715183e3d544d7c2c4c2de4bed4ad8c55229
SHA512 a7d72c51ba9771f8fb6ed1be8be3cc1cdc083eb73967f0bb4953d87687ca035bf9a8499497f27f75a63b2f8f7c7b5d31c8899c2cf0e0c171a9ca2e31547a5131
SSDEEP 6144:lv1L3IhB7K9bu4j33ULJTqnE5AEpcIgb2KfRlG414kl+VUCpn6g8DLWueLJ/Fr5D:lV79buIHULoeKfRlD+r6gqIltr5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2d1c8982329a301119600c7d3c15e5ff

.dll 417KB

2d1c8982329a301119600c7d3c15e5ff

IMPHASH ef9476d0fbfc6b40d5643f82c26da05e
SHA256 77fd2bd2efd583beefcaecab763d3c90e6464b0acc32cf9f7f95e3e12afba991
MD5 2d1c8982329a301119600c7d3c15e5ff
SHA1 48c0715183e3d544d7c2c4c2de4bed4ad8c55229
SHA512 a7d72c51ba9771f8fb6ed1be8be3cc1cdc083eb73967f0bb4953d87687ca035bf9a8499497f27f75a63b2f8f7c7b5d31c8899c2cf0e0c171a9ca2e31547a5131
SSDEEP 6144:lv1L3IhB7K9bu4j33ULJTqnE5AEpcIgb2KfRlG414kl+VUCpn6g8DLWueLJ/Fr5D:lV79buIHULoeKfRlD+r6gqIltr5
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

88696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

TlsGetValue CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW GetModuleFileNameW WriteFile EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

2d1c8982329a301119600c7d3c15e5ff

ws2_32

kernel32

ole32