UaxvATwx1nW9e5V2[.]dll[.]vir

General

Target
UaxvATwx1nW9e5V2.dll.vir
Size 307KB
Sample220621-v9f74abbf9
SHA256 b48b03e72c572782ad6ea8401e1c76b15c8e96aba55a57bf18cd2f969ca9e9ce
MD5 46f7af716bba0fb03b07d4964a955de8
SHA1 81d59e70f05f2653d4d51b2ed16bcd90d83dfee0
SHA512 552eb70802289563df7e4b813b95bf939f989c5ceda3d51ef331b3962767dc2aa5986e38f5828a134fca4fd3f40ffb5dcef26957d721599443ce4bf2b5f51e36
SSDEEP 6144:3MiSTD2He3kjHfNsQnRzsNdzq/M+8nlC/FuIbuibSLTf:ciA2FHf3WNmCWF1bTSLz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

UaxvATwx1nW9e5V2.dll.vir

.dll 307KB

UaxvATwx1nW9e5V2.dll.vir

IMPHASH fbb4d9f7f00c9636121e47653fd6dd01
SHA256 b48b03e72c572782ad6ea8401e1c76b15c8e96aba55a57bf18cd2f969ca9e9ce
MD5 46f7af716bba0fb03b07d4964a955de8
SHA1 81d59e70f05f2653d4d51b2ed16bcd90d83dfee0
SHA512 552eb70802289563df7e4b813b95bf939f989c5ceda3d51ef331b3962767dc2aa5986e38f5828a134fca4fd3f40ffb5dcef26957d721599443ce4bf2b5f51e36
SSDEEP 6144:3MiSTD2He3kjHfNsQnRzsNdzq/M+8nlC/FuIbuibSLTf:ciA2FHf3WNmCWF1bTSLz
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

14232

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LoadLibraryExW VirtualAlloc WriteConsoleW SetStdHandle CloseHandle HeapSize OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringW HeapReAlloc HeapAlloc GetModuleFileNameW WriteFile GetCPInfo GetOEMCP GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetLastError WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection RtlUnwindEx SetLastError ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW IsValidCodePage GetACP CreateFileW

user32

EndPaint DestroyWindow TranslateAcceleratorW GetWindowRect GetMessageW PostQuitMessage GetSubMenu DialogBoxParamW LoadCursorW BeginPaint TranslateMessage LoadAcceleratorsW RegisterClassExW LoadIconW TrackPopupMenuEx LoadMenuW EndDialog LoadStringW ShowWindow CreateWindowExW MessageBoxW UpdateWindow DestroyMenu DefWindowProcW DispatchMessageW

AWxCWlhOnLMubKhSFoYdJdGxWq AXjoeuGJnzH AXmxXUOLyQOfTByKBQTzdF AtZWbRddBOb BHxliMBDArDeVZLmPP CQqHoyVpCHpjbZSPOYMlW CTPixtriRQDFkifypRqRsuc CVeMHfUach CoJhoUzNAC DVeHrbblBKBTZylsQnIWrAMjTq DcjBremKPJceMKuYyXVjA DllRegisterServer DnzRZFZAvOgAyCABT EiehIjwIemwbspFiZqTfYdKLa FFNxZnXWjLZDLyhbeenDnzu FVnVixPhvOARYGV GYJgmEWAOgeveZnvB GatDfCXsvqaSyBRrOPl GgdDFFAsPbHKmvllNFj HAKyQCtggmJlsjWcdmF HEJRqEExeb HTRSRFSMlqnEyJAEXHkYjGLe HUxXiShFMQxokjE HbSxzPoiEkYoxPxVFH HfwybIevwJpfIKqEZkel IEYaCRb ISsykaWLZO IXiabpknMqoSiRIAQtzk InOZukRCWlVRV IvEDeGvvYoBzagOYSjILZrq JIHXWSxOJ JPOhOhctEljpUmybGWzTttef JxWYFu KVnUtNoobtsAPB KeXfYWmVosDeakKWQu KnQpnAjYhZ KqFSvz LHFGvnokbdGiOvJeZ LYDSMTJJmqDeskADUyFJe LmxxOwQbNipdXy MFpvyYrdhEGyYDMGkKaffTOv MGJLcPuWWOVxOvabvivRzmEKT MHvbExamLAyIdjZq MqYMsgnEU NIkvlEpbPZJo NNIGQTT NUglEhOEQFBlBVXoZpNWpQr NUhBAQOUgCVvPtjxXivZYhxxu NXjpRxxeAcjTFEvq OOPdcKOF OPrcaOxCFyfYrtUKEHANNNhm OduJhGQ PCLOryMyDJoaNyDja PFofQm POjrQjAFeEOzfyxDQGCoYKlSq PStmUoz PWNiffLlVcAHjzbpaELYvARc PdEmTRNAViMC PfUloVTqrHlCxWPJvabdrMYip QNLKRUZXJwswIXcAJGQ QXNPoIuI QYEFpLBavKhpMSeQrwLyBs RcctwhczAMXYTW SPaxHVYd SXiKEzLfrnr SeFeLycBmGQKg SkBIUfxDTMMifBiRxnoAmftUWG SlLEfDG SqsiwWtpWZHw SsuxhIVnNqKcXhrtUA TCtFrj UEHkbjaXvlAzkkENRWZLRG UaLxelaVreHrOFI UbCDveB UkONVK VAFMqMQIjpgSq VJsbCrXKiohoOtwKpLKgsy VLdrELrDqHIaTFyL VPTVsjVMlEzuWIkSUQ VartPyxSWcn VasbQQePaQH VfvtItlRATfRRfKphvwTAv VrXIVHDYUwXitIXBnXrzxe VwhpKCECwWTyKFBeQwPfaIK WMZbJiBWmkkeDKTcPPYLS WwTJlfKGEFViJ WwTuZy XcaISxWOJfVaZzfjwbPdtcwz XtcpvxeDLrQKGu XzQjPuuVsbXAXxRLdNZRPdEdFS YhnJKcoCFiagYN YhxxmoKjDobEPVxZOYqcfZv YoMlCpCeZUpYCeXT ZJyeJN brauLyfzMO cMZykOUKFcjAFnrnUveUPPOTOo ccBoDZo ckSgBmWcBLAzdfb cviUDOfuCPrAoPJXnonInfds cwrOyYjAzqNgiPqRwFAB czdALDgGT dLffCtTIRjvBncQf ewhJkgCTtJvBkBWwAwtIurmWS fFSFiTKQzluUza fOtuVkmUtndurETlZuIGAvb fkCqlLCMaCXS geTzrCHcvNHNLbGAC gqFtlPffNcrbXk gwwkOioE hIRSsnxxodb hPfrAMBR haedgUYsVasRfqAuPSsTaLMnn hbYHGuLujhUOIjfGgOz hmFrVSuhgdwLT hoYJWhBGkEapKJUSqu hxfisvWYnNQcQqk iKIggOCu iLmpoaZWaRyYUR iOeEuJA iZiYCBxBqDZ inyIyRlGiNKdxKblgC iyNfWDEzVxarrvSPNsLouX jQmBKfWqgPgb jioICeBrkDCuCqmqRmol kQBDYrHyycgtaYVarbQ knIBnPUGJbjoqBn ksopqUwwlpshaLyFSXKQz lVuNJwVjpLUtRSj luPSrzEQRjWKqMiYIcAEMOsOu mOGMij mujsBMaAvejPRphXEECCtZK nBgmigItQsBxryPHSwu nFgiOvw nbvzSlbWGFsjQVVTHyhiToOGQ nzICZqG oetIDKq okvXoqvjacRogREUsN pECrILugEefgUSVFDO qFczQKzn qeuQoXMmPNYlYgfYUFSOMZW sivTVpzgHAkEsROKvZDE smDzqZ svDgFgNHKRSNsSYMp sxbnYqi tbUoTDrgcVgDh tbldycevtd uTDOciCUBOUNZSLnQY upcUNFJfUnoojjdgZUhw uphgkWePBRkukcLVGCLk usRjZdyeVetHMYKvt vMfhdMWDKrrhwyJxxuj vRjRiTtEeqIrZfRADA vtmctjcXKuDVza vwNwYAsuyOPdMRUGgNiOUKWrPB vxDlnbeugihjsVIMdUEbGNNi weollrcoqHA wiBUNILLKYbCVljnbnnzh wmJswkscRRhphOUtELE xHhfPeTMRxQqruTwenL xJwHjif xPaoTbctFSQsvVdkOzEMvRLEcE xeshqHIlSfnbBkBInwaBIHfUUm xxQLhoiegYeuhmgnHHayiFFDn yDKWYOieGlpdJLR yQJYILwSSUJykHlRS yYbcTuLaSqqkWLwQdZ yiVAUuSvkVJOM zENGTYzXKCPauQzazEXPb

Sharing