2b9c9eb81f0e38433863612ef32eb7c9

General

Target
2b9c9eb81f0e38433863612ef32eb7c9
Size 416KB
Sample220615-b7jewsfcbl
SHA256 5bd97eeabc24e093879edfeb37bdb056971efe28dc6a7891c56958d3e214c779
MD5 2b9c9eb81f0e38433863612ef32eb7c9
SHA1 afde2a753bccdd8664e2d00beb9f1c11081ba7bd
SHA512 9108bc5f3ed7f679e6f6ea9e9e3f25fde7e8eefafe489e428dfe182cde5ecbadf06d9e4574405ac6e822cd639caa11d3f0800defc2f6c4ee8abeb70dffb24a2d
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhgoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5rAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2b9c9eb81f0e38433863612ef32eb7c9

.dll 416KB

2b9c9eb81f0e38433863612ef32eb7c9

IMPHASH ef9476d0fbfc6b40d5643f82c26da05e
SHA256 5bd97eeabc24e093879edfeb37bdb056971efe28dc6a7891c56958d3e214c779
MD5 2b9c9eb81f0e38433863612ef32eb7c9
SHA1 afde2a753bccdd8664e2d00beb9f1c11081ba7bd
SHA512 9108bc5f3ed7f679e6f6ea9e9e3f25fde7e8eefafe489e428dfe182cde5ecbadf06d9e4574405ac6e822cd639caa11d3f0800defc2f6c4ee8abeb70dffb24a2d
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhgoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5rAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

88696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

TlsGetValue CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW GetModuleFileNameW WriteFile EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

2b9c9eb81f0e38433863612ef32eb7c9

ws2_32

kernel32

ole32