0fca53ca3a3034e4f1ab2354ad2af281

General

Target
0fca53ca3a3034e4f1ab2354ad2af281
Size 416KB
Sample220615-b8n2rsfcfp
SHA256 36d9f397dcd1f23cf00c330304024c0d4142e53014051f62521765a3c94de064
MD5 0fca53ca3a3034e4f1ab2354ad2af281
SHA1 467a0e7a84de74051c4d576a1c5ad1368a7025db
SHA512 7e8e9ba09ee2aa4474bc13965e97cd2ce77dc45692c2c28a3f7f0ef3ed92ca8495611c6c51b2b997e2c83f58ffe3a85efc8bf6c0e8e35cf685a80fc5f5571e82
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhCoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5BAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0fca53ca3a3034e4f1ab2354ad2af281

.dll 416KB

0fca53ca3a3034e4f1ab2354ad2af281

IMPHASH ef9476d0fbfc6b40d5643f82c26da05e
SHA256 36d9f397dcd1f23cf00c330304024c0d4142e53014051f62521765a3c94de064
MD5 0fca53ca3a3034e4f1ab2354ad2af281
SHA1 467a0e7a84de74051c4d576a1c5ad1368a7025db
SHA512 7e8e9ba09ee2aa4474bc13965e97cd2ce77dc45692c2c28a3f7f0ef3ed92ca8495611c6c51b2b997e2c83f58ffe3a85efc8bf6c0e8e35cf685a80fc5f5571e82
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhCoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5BAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

88696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

TlsGetValue CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW GetModuleFileNameW WriteFile EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

0fca53ca3a3034e4f1ab2354ad2af281

ws2_32

kernel32

ole32