c30fe9aa20cdce895fca455735700f61

General

Target
c30fe9aa20cdce895fca455735700f61
Size 666KB
Sample220615-pygrlafagj
SHA256 60d2dfcba6c351d66ca2d038009de2924e5c7b9cf4285bdb59bd320c14c9e712
MD5 c30fe9aa20cdce895fca455735700f61
SHA1 9027ad5672665bf477bce4f142f0056435db42de
SHA512 2dccb5b3bc335cd9145e29fff55c1ca3086884d1dc03008e475c8236286a9e6d479ebbdef65814c68ee8caba24e9fc656f7ed2005e7055d1ea827549bf81fdbe
SSDEEP 12288:AbE/HRtNDc4Tl94NTt4B7wU47yYr+H+myDqsQul21kYygdYst3N2Z3Y2tieHNJn4:AbE/HR6qsQ11Lt9PsNJUDXX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c30fe9aa20cdce895fca455735700f61

.dll 666KB

c30fe9aa20cdce895fca455735700f61

IMPHASH 2eca9e124557781b3f760fd6e4322522
SHA256 60d2dfcba6c351d66ca2d038009de2924e5c7b9cf4285bdb59bd320c14c9e712
MD5 c30fe9aa20cdce895fca455735700f61
SHA1 9027ad5672665bf477bce4f142f0056435db42de
SHA512 2dccb5b3bc335cd9145e29fff55c1ca3086884d1dc03008e475c8236286a9e6d479ebbdef65814c68ee8caba24e9fc656f7ed2005e7055d1ea827549bf81fdbe
SSDEEP 12288:AbE/HRtNDc4Tl94NTt4B7wU47yYr+H+myDqsQul21kYygdYst3N2Z3Y2tieHNJn4:AbE/HR6qsQ11Lt9PsNJUDXX
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

212444

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentThread VirtualAlloc SetThreadAffinityMask CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW FreeLibrary GetTimeZoneInformation QueryPerformanceFrequency SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetOEMCP GetACP IsValidCodePage GetModuleFileNameW WriteFile FreeEnvironmentStringsW SetConsoleCtrlHandler QueryPerformanceCounter GetEnvironmentStringsW GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId FatalAppExitA GetCPInfo HeapAlloc RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW GetProcAddress CreateSemaphoreW IsProcessorFeaturePresent GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap IsDebuggerPresent GetStdHandle GetFileType GetModuleFileNameA GetCurrentProcessId SetEnvironmentVariableA

user32

GetMessageW SetProcessDPIAware LoadIconW LoadCursorW GetDesktopWindow FillRect InvalidateRect EndPaint BeginPaint UpdateWindow DrawTextW KillTimer SetCoalescableTimer SetTimer ShowWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage

gdi32

GetStockObject

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

c30fe9aa20cdce895fca455735700f61

kernel32

user32

gdi32

ole32