271955d4bbf542d546516ee6f02e74fa

General

Target
271955d4bbf542d546516ee6f02e74fa
Size 408KB
Sample220615-jqdr3sgce4
SHA256 ddf3cb481f1866584e1a45bab010445a25cf9eeca5145c13217d838d241cf97d
MD5 271955d4bbf542d546516ee6f02e74fa
SHA1 a42a254153393909017caea41f5ccedeae8cd064
SHA512 10e2db20cc4bbfedb78eae86b99e08c6fdd589357d6db306587895aa170e6b6bfb4ba74e9c6615aefaa1d9e50568d2d83eefd691ff82326b11f07ca0fe62e75c
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVv53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPd5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

271955d4bbf542d546516ee6f02e74fa

.dll 408KB

271955d4bbf542d546516ee6f02e74fa

IMPHASH 7f17bee5c6b681d4f6afdf362cb13b3c
SHA256 ddf3cb481f1866584e1a45bab010445a25cf9eeca5145c13217d838d241cf97d
MD5 271955d4bbf542d546516ee6f02e74fa
SHA1 a42a254153393909017caea41f5ccedeae8cd064
SHA512 10e2db20cc4bbfedb78eae86b99e08c6fdd589357d6db306587895aa170e6b6bfb4ba74e9c6615aefaa1d9e50568d2d83eefd691ff82326b11f07ca0fe62e75c
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVv53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPd5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

97024

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

CreateFileW ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW LoadLibraryExW OutputDebugStringW HeapReAlloc EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection WideCharToMultiByte GetLocaleInfoEx MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetProcAddress HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP SetLastError GetFileType InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

271955d4bbf542d546516ee6f02e74fa

ws2_32

kernel32

ole32