9cd4d765aed24005623202643254215b

General

Target
9cd4d765aed24005623202643254215b
Size 416KB
Sample220615-back3sdddl
SHA256 eb45f3e3ba52318ac50f6b72d1d9c4952231ab70eff855d40bb0138d8eeecee5
MD5 9cd4d765aed24005623202643254215b
SHA1 2a1942dd0d4d1ea9e4f29fd2e5782fb8b1223104
SHA512 458aafdfae588f2b37c48c580db0113a8781c4078d711851aeb776fc3f2830cb2af45a1f209732813a93f66b8ddf44e7a71fccb1bf498cddc26db27378479368
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhSoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5NAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9cd4d765aed24005623202643254215b

.dll 416KB

9cd4d765aed24005623202643254215b

IMPHASH ef9476d0fbfc6b40d5643f82c26da05e
SHA256 eb45f3e3ba52318ac50f6b72d1d9c4952231ab70eff855d40bb0138d8eeecee5
MD5 9cd4d765aed24005623202643254215b
SHA1 2a1942dd0d4d1ea9e4f29fd2e5782fb8b1223104
SHA512 458aafdfae588f2b37c48c580db0113a8781c4078d711851aeb776fc3f2830cb2af45a1f209732813a93f66b8ddf44e7a71fccb1bf498cddc26db27378479368
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhSoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5NAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

88696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

TlsGetValue CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW GetModuleFileNameW WriteFile EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

9cd4d765aed24005623202643254215b

ws2_32

kernel32

ole32