8691bee93608dc0685ee102550092ee5

General

Target
8691bee93608dc0685ee102550092ee5
Size 408KB
Sample220615-ldlchadaaq
SHA256 d9ea4bdf8c7cb6781c6c7a7001ba189838865a895488cffa5ccc8e32cd8c4413
MD5 8691bee93608dc0685ee102550092ee5
SHA1 407313276521d8468a3c7a65f00f74a2f49fb2c1
SHA512 6f99178c73e4246443ba77e0989136e7c2d31ab9b086c8bd56dcf3f172ef66e131eb7fe9d5359d3e5e2757d92c8784c1da487aeb6304140efaa35ef35ba0e9aa
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVN53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPb5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8691bee93608dc0685ee102550092ee5

.dll 408KB

8691bee93608dc0685ee102550092ee5

IMPHASH 7f17bee5c6b681d4f6afdf362cb13b3c
SHA256 d9ea4bdf8c7cb6781c6c7a7001ba189838865a895488cffa5ccc8e32cd8c4413
MD5 8691bee93608dc0685ee102550092ee5
SHA1 407313276521d8468a3c7a65f00f74a2f49fb2c1
SHA512 6f99178c73e4246443ba77e0989136e7c2d31ab9b086c8bd56dcf3f172ef66e131eb7fe9d5359d3e5e2757d92c8784c1da487aeb6304140efaa35ef35ba0e9aa
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVN53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPb5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

97024

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

CreateFileW ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW LoadLibraryExW OutputDebugStringW HeapReAlloc EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection WideCharToMultiByte GetLocaleInfoEx MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetProcAddress HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP SetLastError GetFileType InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

8691bee93608dc0685ee102550092ee5

ws2_32

kernel32

ole32