z9MrftvbloX0Daniqv1ql8bBvrCBUgGrhE[.]dll[.]vir

General

Target
z9MrftvbloX0Daniqv1ql8bBvrCBUgGrhE.dll.vir
Size 308KB
Sample220621-tkmg5saaa8
SHA256 bbfcace2db32e33128a2b1de097c73b82ed132ba58016c86ffee2ff55e03bdee
MD5 aff9f4db1e89178797e12399ece84417
SHA1 31aaed8fbe702f57b1ba4df395bbb1c816c795c9
SHA512 1d3e1e66b296f649a372f60bf5897ba52a528440da4b9f670c6a1f11c8149434647117e0b725e42bf20f97c9b5be603dbf7e50fc45dd037e4410d8629821e627
SSDEEP 6144:JqdSTDcHe3kjHfNsQnwXYyDzVbh2RVFKSwmA6I+108ios+4XPOl5uG9+:uAcFHf3wIyT2dkv8iI6w3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

z9MrftvbloX0Daniqv1ql8bBvrCBUgGrhE.dll.vir

.dll 308KB

z9MrftvbloX0Daniqv1ql8bBvrCBUgGrhE.dll.vir

IMPHASH fbb4d9f7f00c9636121e47653fd6dd01
SHA256 bbfcace2db32e33128a2b1de097c73b82ed132ba58016c86ffee2ff55e03bdee
MD5 aff9f4db1e89178797e12399ece84417
SHA1 31aaed8fbe702f57b1ba4df395bbb1c816c795c9
SHA512 1d3e1e66b296f649a372f60bf5897ba52a528440da4b9f670c6a1f11c8149434647117e0b725e42bf20f97c9b5be603dbf7e50fc45dd037e4410d8629821e627
SSDEEP 6144:JqdSTDcHe3kjHfNsQnwXYyDzVbh2RVFKSwmA6I+108ios+4XPOl5uG9+:uAcFHf3wIyT2dkv8iI6w3
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

14232

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LoadLibraryExW VirtualAlloc WriteConsoleW SetStdHandle CloseHandle HeapSize OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringW HeapReAlloc HeapAlloc GetModuleFileNameW WriteFile GetCPInfo GetOEMCP GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetLastError WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection RtlUnwindEx SetLastError ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW IsValidCodePage GetACP CreateFileW

user32

EndPaint DestroyWindow TranslateAcceleratorW GetWindowRect GetMessageW PostQuitMessage GetSubMenu DialogBoxParamW LoadCursorW BeginPaint TranslateMessage LoadAcceleratorsW RegisterClassExW LoadIconW TrackPopupMenuEx LoadMenuW EndDialog LoadStringW ShowWindow CreateWindowExW MessageBoxW UpdateWindow DestroyMenu DefWindowProcW DispatchMessageW

AWxCWlhOnLMubKhSFoYdJdGxWq AXjoeuGJnzH AXmxXUOLyQOfTByKBQTzdF AtZWbRddBOb BHxliMBDArDeVZLmPP CQqHoyVpCHpjbZSPOYMlW CTPixtriRQDFkifypRqRsuc CVeMHfUach CoJhoUzNAC DVeHrbblBKBTZylsQnIWrAMjTq DcjBremKPJceMKuYyXVjA DllRegisterServer DnzRZFZAvOgAyCABT EiehIjwIemwbspFiZqTfYdKLa FFNxZnXWjLZDLyhbeenDnzu FVnVixPhvOARYGV GYJgmEWAOgeveZnvB GatDfCXsvqaSyBRrOPl GgdDFFAsPbHKmvllNFj HAKyQCtggmJlsjWcdmF HEJRqEExeb HTRSRFSMlqnEyJAEXHkYjGLe HUxXiShFMQxokjE HbSxzPoiEkYoxPxVFH HfwybIevwJpfIKqEZkel IEYaCRb ISsykaWLZO IXiabpknMqoSiRIAQtzk InOZukRCWlVRV IvEDeGvvYoBzagOYSjILZrq JIHXWSxOJ JPOhOhctEljpUmybGWzTttef JxWYFu KVnUtNoobtsAPB KeXfYWmVosDeakKWQu KnQpnAjYhZ KqFSvz LHFGvnokbdGiOvJeZ LYDSMTJJmqDeskADUyFJe LmxxOwQbNipdXy MFpvyYrdhEGyYDMGkKaffTOv MGJLcPuWWOVxOvabvivRzmEKT MHvbExamLAyIdjZq MqYMsgnEU NIkvlEpbPZJo NNIGQTT NUglEhOEQFBlBVXoZpNWpQr NUhBAQOUgCVvPtjxXivZYhxxu NXjpRxxeAcjTFEvq OOPdcKOF OPrcaOxCFyfYrtUKEHANNNhm OduJhGQ PCLOryMyDJoaNyDja PFofQm POjrQjAFeEOzfyxDQGCoYKlSq PStmUoz PWNiffLlVcAHjzbpaELYvARc PdEmTRNAViMC PfUloVTqrHlCxWPJvabdrMYip QNLKRUZXJwswIXcAJGQ QXNPoIuI QYEFpLBavKhpMSeQrwLyBs RcctwhczAMXYTW SPaxHVYd SXiKEzLfrnr SeFeLycBmGQKg SkBIUfxDTMMifBiRxnoAmftUWG SlLEfDG SqsiwWtpWZHw SsuxhIVnNqKcXhrtUA TCtFrj UEHkbjaXvlAzkkENRWZLRG UaLxelaVreHrOFI UbCDveB UkONVK VAFMqMQIjpgSq VJsbCrXKiohoOtwKpLKgsy VLdrELrDqHIaTFyL VPTVsjVMlEzuWIkSUQ VartPyxSWcn VasbQQePaQH VfvtItlRATfRRfKphvwTAv VrXIVHDYUwXitIXBnXrzxe VwhpKCECwWTyKFBeQwPfaIK WMZbJiBWmkkeDKTcPPYLS WwTJlfKGEFViJ WwTuZy XcaISxWOJfVaZzfjwbPdtcwz XtcpvxeDLrQKGu XzQjPuuVsbXAXxRLdNZRPdEdFS YhnJKcoCFiagYN YhxxmoKjDobEPVxZOYqcfZv YoMlCpCeZUpYCeXT ZJyeJN brauLyfzMO cMZykOUKFcjAFnrnUveUPPOTOo ccBoDZo ckSgBmWcBLAzdfb cviUDOfuCPrAoPJXnonInfds cwrOyYjAzqNgiPqRwFAB czdALDgGT dLffCtTIRjvBncQf ewhJkgCTtJvBkBWwAwtIurmWS fFSFiTKQzluUza fOtuVkmUtndurETlZuIGAvb fkCqlLCMaCXS geTzrCHcvNHNLbGAC gqFtlPffNcrbXk gwwkOioE hIRSsnxxodb hPfrAMBR haedgUYsVasRfqAuPSsTaLMnn hbYHGuLujhUOIjfGgOz hmFrVSuhgdwLT hoYJWhBGkEapKJUSqu hxfisvWYnNQcQqk iKIggOCu iLmpoaZWaRyYUR iOeEuJA iZiYCBxBqDZ inyIyRlGiNKdxKblgC iyNfWDEzVxarrvSPNsLouX jQmBKfWqgPgb jioICeBrkDCuCqmqRmol kQBDYrHyycgtaYVarbQ knIBnPUGJbjoqBn ksopqUwwlpshaLyFSXKQz lVuNJwVjpLUtRSj luPSrzEQRjWKqMiYIcAEMOsOu mOGMij mujsBMaAvejPRphXEECCtZK nBgmigItQsBxryPHSwu nFgiOvw nbvzSlbWGFsjQVVTHyhiToOGQ nzICZqG oetIDKq okvXoqvjacRogREUsN pECrILugEefgUSVFDO qFczQKzn qeuQoXMmPNYlYgfYUFSOMZW sivTVpzgHAkEsROKvZDE smDzqZ svDgFgNHKRSNsSYMp sxbnYqi tbUoTDrgcVgDh tbldycevtd uTDOciCUBOUNZSLnQY upcUNFJfUnoojjdgZUhw uphgkWePBRkukcLVGCLk usRjZdyeVetHMYKvt vMfhdMWDKrrhwyJxxuj vRjRiTtEeqIrZfRADA vtmctjcXKuDVza vwNwYAsuyOPdMRUGgNiOUKWrPB vxDlnbeugihjsVIMdUEbGNNi weollrcoqHA wiBUNILLKYbCVljnbnnzh wmJswkscRRhphOUtELE xHhfPeTMRxQqruTwenL xJwHjif xPaoTbctFSQsvVdkOzEMvRLEcE xeshqHIlSfnbBkBInwaBIHfUUm xxQLhoiegYeuhmgnHHayiFFDn yDKWYOieGlpdJLR yQJYILwSSUJykHlRS yYbcTuLaSqqkWLwQdZ yiVAUuSvkVJOM zENGTYzXKCPauQzazEXPb

Sharing