6Z4gKVocmn9H[.]dll

General

Target
6Z4gKVocmn9H.dll
Size 408KB
Sample220615-m1ph4sdgfk
SHA256 4a4d2f4bc38a9ebe21d48ff876add0976132de7b07c248a4d4097178e603c0b4
MD5 09e60b07f6082e8ea569aea814c70565
SHA1 44d0d5879197d007b073058dddad7ba5e17974db
SHA512 2d5c13da4aa6c5f88b697af406f7b604b47512e5e08e371e73b47e10114c2a013fe0b4f632b60afedb6403225471a573c9f325bd45735b67de2deb9260a9e795
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVW53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPg5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6Z4gKVocmn9H.dll

.dll 408KB

6Z4gKVocmn9H.dll

IMPHASH 7f17bee5c6b681d4f6afdf362cb13b3c
SHA256 4a4d2f4bc38a9ebe21d48ff876add0976132de7b07c248a4d4097178e603c0b4
MD5 09e60b07f6082e8ea569aea814c70565
SHA1 44d0d5879197d007b073058dddad7ba5e17974db
SHA512 2d5c13da4aa6c5f88b697af406f7b604b47512e5e08e371e73b47e10114c2a013fe0b4f632b60afedb6403225471a573c9f325bd45735b67de2deb9260a9e795
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVW53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPg5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

97024

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

CreateFileW ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW LoadLibraryExW OutputDebugStringW HeapReAlloc EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection WideCharToMultiByte GetLocaleInfoEx MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetProcAddress HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP SetLastError GetFileType InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx

ole32

CoLoadLibrary

Sharing