38a33ea518bb4370e681f8a32b11ef60

General

Target
38a33ea518bb4370e681f8a32b11ef60
Size 416KB
Sample220615-mesnmsgcg6
SHA256 f2c95613ee71ba3244816ea7353e09cd6a0b3232eb9aff7179737e14ad3689aa
MD5 38a33ea518bb4370e681f8a32b11ef60
SHA1 3f50b264a28a70c5ee6d30088ac409f58528a6a3
SHA512 f6485fc19fe516c9064c382a9ad75f609ca933da4d5c63d01694563707714428287a99e9affb2569fd5b1d4c70ce261992d7e379e2ad7d5eff79e18ce92d31a4
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhSoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5FAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

38a33ea518bb4370e681f8a32b11ef60

.dll 416KB

38a33ea518bb4370e681f8a32b11ef60

IMPHASH ef9476d0fbfc6b40d5643f82c26da05e
SHA256 f2c95613ee71ba3244816ea7353e09cd6a0b3232eb9aff7179737e14ad3689aa
MD5 38a33ea518bb4370e681f8a32b11ef60
SHA1 3f50b264a28a70c5ee6d30088ac409f58528a6a3
SHA512 f6485fc19fe516c9064c382a9ad75f609ca933da4d5c63d01694563707714428287a99e9affb2569fd5b1d4c70ce261992d7e379e2ad7d5eff79e18ce92d31a4
SSDEEP 6144:SPfL3IhB7K9ejouX3ULYTqnE5AEJhSoRphbDGbvWkCTyQ5GZalsGCIpbjGs3:S779ejdnUL5FAb6qk4yHZY/
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

88696

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

TlsGetValue CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW GetModuleFileNameW WriteFile EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

38a33ea518bb4370e681f8a32b11ef60

ws2_32

kernel32

ole32