U0iQQGKsQEb[.]dll[.]vir

General

Target
U0iQQGKsQEb.dll.vir
Size 308KB
Sample220621-tkmg5saaa7
SHA256 a051d201dc87b9301f98bd53de834d111e0d9d7edc325331ed75f1f3a5ef24fd
MD5 a47e5bdd1fc2ded9608c9c627ab2d47d
SHA1 95962c0a49e35bf19b946d989eec3bc4d8c38df0
SHA512 853fd6eaf1601dd84425d2a5c80db4d02af65c2396792f371cf5342c6bfa326fa3048eca60875fdfa8f6d18f9625beba811b2c86e336546e139323c10e57760e
SSDEEP 6144:JqdSTDcHe3kjHfNsQn9XYyDzVbh2RVFKSwmA6I+108ios+4XPOl5uG9+:uAcFHf39IyT2dkv8iI6w3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

U0iQQGKsQEb.dll.vir

.dll 308KB

U0iQQGKsQEb.dll.vir

IMPHASH fbb4d9f7f00c9636121e47653fd6dd01
SHA256 a051d201dc87b9301f98bd53de834d111e0d9d7edc325331ed75f1f3a5ef24fd
MD5 a47e5bdd1fc2ded9608c9c627ab2d47d
SHA1 95962c0a49e35bf19b946d989eec3bc4d8c38df0
SHA512 853fd6eaf1601dd84425d2a5c80db4d02af65c2396792f371cf5342c6bfa326fa3048eca60875fdfa8f6d18f9625beba811b2c86e336546e139323c10e57760e
SSDEEP 6144:JqdSTDcHe3kjHfNsQn9XYyDzVbh2RVFKSwmA6I+108ios+4XPOl5uG9+:uAcFHf39IyT2dkv8iI6w3
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

14232

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LoadLibraryExW VirtualAlloc WriteConsoleW SetStdHandle CloseHandle HeapSize OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringW HeapReAlloc HeapAlloc GetModuleFileNameW WriteFile GetCPInfo GetOEMCP GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetLastError WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection RtlUnwindEx SetLastError ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW IsValidCodePage GetACP CreateFileW

user32

EndPaint DestroyWindow TranslateAcceleratorW GetWindowRect GetMessageW PostQuitMessage GetSubMenu DialogBoxParamW LoadCursorW BeginPaint TranslateMessage LoadAcceleratorsW RegisterClassExW LoadIconW TrackPopupMenuEx LoadMenuW EndDialog LoadStringW ShowWindow CreateWindowExW MessageBoxW UpdateWindow DestroyMenu DefWindowProcW DispatchMessageW

AWxCWlhOnLMubKhSFoYdJdGxWq AXjoeuGJnzH AXmxXUOLyQOfTByKBQTzdF AtZWbRddBOb BHxliMBDArDeVZLmPP CQqHoyVpCHpjbZSPOYMlW CTPixtriRQDFkifypRqRsuc CVeMHfUach CoJhoUzNAC DVeHrbblBKBTZylsQnIWrAMjTq DcjBremKPJceMKuYyXVjA DllRegisterServer DnzRZFZAvOgAyCABT EiehIjwIemwbspFiZqTfYdKLa FFNxZnXWjLZDLyhbeenDnzu FVnVixPhvOARYGV GYJgmEWAOgeveZnvB GatDfCXsvqaSyBRrOPl GgdDFFAsPbHKmvllNFj HAKyQCtggmJlsjWcdmF HEJRqEExeb HTRSRFSMlqnEyJAEXHkYjGLe HUxXiShFMQxokjE HbSxzPoiEkYoxPxVFH HfwybIevwJpfIKqEZkel IEYaCRb ISsykaWLZO IXiabpknMqoSiRIAQtzk InOZukRCWlVRV IvEDeGvvYoBzagOYSjILZrq JIHXWSxOJ JPOhOhctEljpUmybGWzTttef JxWYFu KVnUtNoobtsAPB KeXfYWmVosDeakKWQu KnQpnAjYhZ KqFSvz LHFGvnokbdGiOvJeZ LYDSMTJJmqDeskADUyFJe LmxxOwQbNipdXy MFpvyYrdhEGyYDMGkKaffTOv MGJLcPuWWOVxOvabvivRzmEKT MHvbExamLAyIdjZq MqYMsgnEU NIkvlEpbPZJo NNIGQTT NUglEhOEQFBlBVXoZpNWpQr NUhBAQOUgCVvPtjxXivZYhxxu NXjpRxxeAcjTFEvq OOPdcKOF OPrcaOxCFyfYrtUKEHANNNhm OduJhGQ PCLOryMyDJoaNyDja PFofQm POjrQjAFeEOzfyxDQGCoYKlSq PStmUoz PWNiffLlVcAHjzbpaELYvARc PdEmTRNAViMC PfUloVTqrHlCxWPJvabdrMYip QNLKRUZXJwswIXcAJGQ QXNPoIuI QYEFpLBavKhpMSeQrwLyBs RcctwhczAMXYTW SPaxHVYd SXiKEzLfrnr SeFeLycBmGQKg SkBIUfxDTMMifBiRxnoAmftUWG SlLEfDG SqsiwWtpWZHw SsuxhIVnNqKcXhrtUA TCtFrj UEHkbjaXvlAzkkENRWZLRG UaLxelaVreHrOFI UbCDveB UkONVK VAFMqMQIjpgSq VJsbCrXKiohoOtwKpLKgsy VLdrELrDqHIaTFyL VPTVsjVMlEzuWIkSUQ VartPyxSWcn VasbQQePaQH VfvtItlRATfRRfKphvwTAv VrXIVHDYUwXitIXBnXrzxe VwhpKCECwWTyKFBeQwPfaIK WMZbJiBWmkkeDKTcPPYLS WwTJlfKGEFViJ WwTuZy XcaISxWOJfVaZzfjwbPdtcwz XtcpvxeDLrQKGu XzQjPuuVsbXAXxRLdNZRPdEdFS YhnJKcoCFiagYN YhxxmoKjDobEPVxZOYqcfZv YoMlCpCeZUpYCeXT ZJyeJN brauLyfzMO cMZykOUKFcjAFnrnUveUPPOTOo ccBoDZo ckSgBmWcBLAzdfb cviUDOfuCPrAoPJXnonInfds cwrOyYjAzqNgiPqRwFAB czdALDgGT dLffCtTIRjvBncQf ewhJkgCTtJvBkBWwAwtIurmWS fFSFiTKQzluUza fOtuVkmUtndurETlZuIGAvb fkCqlLCMaCXS geTzrCHcvNHNLbGAC gqFtlPffNcrbXk gwwkOioE hIRSsnxxodb hPfrAMBR haedgUYsVasRfqAuPSsTaLMnn hbYHGuLujhUOIjfGgOz hmFrVSuhgdwLT hoYJWhBGkEapKJUSqu hxfisvWYnNQcQqk iKIggOCu iLmpoaZWaRyYUR iOeEuJA iZiYCBxBqDZ inyIyRlGiNKdxKblgC iyNfWDEzVxarrvSPNsLouX jQmBKfWqgPgb jioICeBrkDCuCqmqRmol kQBDYrHyycgtaYVarbQ knIBnPUGJbjoqBn ksopqUwwlpshaLyFSXKQz lVuNJwVjpLUtRSj luPSrzEQRjWKqMiYIcAEMOsOu mOGMij mujsBMaAvejPRphXEECCtZK nBgmigItQsBxryPHSwu nFgiOvw nbvzSlbWGFsjQVVTHyhiToOGQ nzICZqG oetIDKq okvXoqvjacRogREUsN pECrILugEefgUSVFDO qFczQKzn qeuQoXMmPNYlYgfYUFSOMZW sivTVpzgHAkEsROKvZDE smDzqZ svDgFgNHKRSNsSYMp sxbnYqi tbUoTDrgcVgDh tbldycevtd uTDOciCUBOUNZSLnQY upcUNFJfUnoojjdgZUhw uphgkWePBRkukcLVGCLk usRjZdyeVetHMYKvt vMfhdMWDKrrhwyJxxuj vRjRiTtEeqIrZfRADA vtmctjcXKuDVza vwNwYAsuyOPdMRUGgNiOUKWrPB vxDlnbeugihjsVIMdUEbGNNi weollrcoqHA wiBUNILLKYbCVljnbnnzh wmJswkscRRhphOUtELE xHhfPeTMRxQqruTwenL xJwHjif xPaoTbctFSQsvVdkOzEMvRLEcE xeshqHIlSfnbBkBInwaBIHfUUm xxQLhoiegYeuhmgnHHayiFFDn yDKWYOieGlpdJLR yQJYILwSSUJykHlRS yYbcTuLaSqqkWLwQdZ yiVAUuSvkVJOM zENGTYzXKCPauQzazEXPb

Sharing