KQ46Moviw[.]dll[.]vir

General

Target
KQ46Moviw.dll.vir
Size 307KB
Sample220621-vt9jpsaff8
SHA256 dd3385017be789042dbf35d10bf18f246f4ed110c108f1858df74c7f5cdbb799
MD5 2a88dab52405fc597026c799d8840a3d
SHA1 ae81f7d621aa04d59420b1ab125113653f246f00
SHA512 c2d63b008a8d14dd465b8bce63b2f39fdcc910b92778e7033e410c3bd8c0e1ab521b715b7779ba3b46575e06ad11ff2673a0ab3d3a3b2d01513bbbf0b2e6f091
SSDEEP 6144:3MiSTD2He3kjHfNsQnEzsNdzq/M+8nlC/FuIbuibSLTf:ciA2FHf3TNmCWF1bTSLz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

KQ46Moviw.dll.vir

.dll 307KB

KQ46Moviw.dll.vir

IMPHASH fbb4d9f7f00c9636121e47653fd6dd01
SHA256 dd3385017be789042dbf35d10bf18f246f4ed110c108f1858df74c7f5cdbb799
MD5 2a88dab52405fc597026c799d8840a3d
SHA1 ae81f7d621aa04d59420b1ab125113653f246f00
SHA512 c2d63b008a8d14dd465b8bce63b2f39fdcc910b92778e7033e410c3bd8c0e1ab521b715b7779ba3b46575e06ad11ff2673a0ab3d3a3b2d01513bbbf0b2e6f091
SSDEEP 6144:3MiSTD2He3kjHfNsQnEzsNdzq/M+8nlC/FuIbuibSLTf:ciA2FHf3TNmCWF1bTSLz
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

14232

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LoadLibraryExW VirtualAlloc WriteConsoleW SetStdHandle CloseHandle HeapSize OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringW HeapReAlloc HeapAlloc GetModuleFileNameW WriteFile GetCPInfo GetOEMCP GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetLastError WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection RtlUnwindEx SetLastError ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW IsValidCodePage GetACP CreateFileW

user32

EndPaint DestroyWindow TranslateAcceleratorW GetWindowRect GetMessageW PostQuitMessage GetSubMenu DialogBoxParamW LoadCursorW BeginPaint TranslateMessage LoadAcceleratorsW RegisterClassExW LoadIconW TrackPopupMenuEx LoadMenuW EndDialog LoadStringW ShowWindow CreateWindowExW MessageBoxW UpdateWindow DestroyMenu DefWindowProcW DispatchMessageW

AWxCWlhOnLMubKhSFoYdJdGxWq AXjoeuGJnzH AXmxXUOLyQOfTByKBQTzdF AtZWbRddBOb BHxliMBDArDeVZLmPP CQqHoyVpCHpjbZSPOYMlW CTPixtriRQDFkifypRqRsuc CVeMHfUach CoJhoUzNAC DVeHrbblBKBTZylsQnIWrAMjTq DcjBremKPJceMKuYyXVjA DllRegisterServer DnzRZFZAvOgAyCABT EiehIjwIemwbspFiZqTfYdKLa FFNxZnXWjLZDLyhbeenDnzu FVnVixPhvOARYGV GYJgmEWAOgeveZnvB GatDfCXsvqaSyBRrOPl GgdDFFAsPbHKmvllNFj HAKyQCtggmJlsjWcdmF HEJRqEExeb HTRSRFSMlqnEyJAEXHkYjGLe HUxXiShFMQxokjE HbSxzPoiEkYoxPxVFH HfwybIevwJpfIKqEZkel IEYaCRb ISsykaWLZO IXiabpknMqoSiRIAQtzk InOZukRCWlVRV IvEDeGvvYoBzagOYSjILZrq JIHXWSxOJ JPOhOhctEljpUmybGWzTttef JxWYFu KVnUtNoobtsAPB KeXfYWmVosDeakKWQu KnQpnAjYhZ KqFSvz LHFGvnokbdGiOvJeZ LYDSMTJJmqDeskADUyFJe LmxxOwQbNipdXy MFpvyYrdhEGyYDMGkKaffTOv MGJLcPuWWOVxOvabvivRzmEKT MHvbExamLAyIdjZq MqYMsgnEU NIkvlEpbPZJo NNIGQTT NUglEhOEQFBlBVXoZpNWpQr NUhBAQOUgCVvPtjxXivZYhxxu NXjpRxxeAcjTFEvq OOPdcKOF OPrcaOxCFyfYrtUKEHANNNhm OduJhGQ PCLOryMyDJoaNyDja PFofQm POjrQjAFeEOzfyxDQGCoYKlSq PStmUoz PWNiffLlVcAHjzbpaELYvARc PdEmTRNAViMC PfUloVTqrHlCxWPJvabdrMYip QNLKRUZXJwswIXcAJGQ QXNPoIuI QYEFpLBavKhpMSeQrwLyBs RcctwhczAMXYTW SPaxHVYd SXiKEzLfrnr SeFeLycBmGQKg SkBIUfxDTMMifBiRxnoAmftUWG SlLEfDG SqsiwWtpWZHw SsuxhIVnNqKcXhrtUA TCtFrj UEHkbjaXvlAzkkENRWZLRG UaLxelaVreHrOFI UbCDveB UkONVK VAFMqMQIjpgSq VJsbCrXKiohoOtwKpLKgsy VLdrELrDqHIaTFyL VPTVsjVMlEzuWIkSUQ VartPyxSWcn VasbQQePaQH VfvtItlRATfRRfKphvwTAv VrXIVHDYUwXitIXBnXrzxe VwhpKCECwWTyKFBeQwPfaIK WMZbJiBWmkkeDKTcPPYLS WwTJlfKGEFViJ WwTuZy XcaISxWOJfVaZzfjwbPdtcwz XtcpvxeDLrQKGu XzQjPuuVsbXAXxRLdNZRPdEdFS YhnJKcoCFiagYN YhxxmoKjDobEPVxZOYqcfZv YoMlCpCeZUpYCeXT ZJyeJN brauLyfzMO cMZykOUKFcjAFnrnUveUPPOTOo ccBoDZo ckSgBmWcBLAzdfb cviUDOfuCPrAoPJXnonInfds cwrOyYjAzqNgiPqRwFAB czdALDgGT dLffCtTIRjvBncQf ewhJkgCTtJvBkBWwAwtIurmWS fFSFiTKQzluUza fOtuVkmUtndurETlZuIGAvb fkCqlLCMaCXS geTzrCHcvNHNLbGAC gqFtlPffNcrbXk gwwkOioE hIRSsnxxodb hPfrAMBR haedgUYsVasRfqAuPSsTaLMnn hbYHGuLujhUOIjfGgOz hmFrVSuhgdwLT hoYJWhBGkEapKJUSqu hxfisvWYnNQcQqk iKIggOCu iLmpoaZWaRyYUR iOeEuJA iZiYCBxBqDZ inyIyRlGiNKdxKblgC iyNfWDEzVxarrvSPNsLouX jQmBKfWqgPgb jioICeBrkDCuCqmqRmol kQBDYrHyycgtaYVarbQ knIBnPUGJbjoqBn ksopqUwwlpshaLyFSXKQz lVuNJwVjpLUtRSj luPSrzEQRjWKqMiYIcAEMOsOu mOGMij mujsBMaAvejPRphXEECCtZK nBgmigItQsBxryPHSwu nFgiOvw nbvzSlbWGFsjQVVTHyhiToOGQ nzICZqG oetIDKq okvXoqvjacRogREUsN pECrILugEefgUSVFDO qFczQKzn qeuQoXMmPNYlYgfYUFSOMZW sivTVpzgHAkEsROKvZDE smDzqZ svDgFgNHKRSNsSYMp sxbnYqi tbUoTDrgcVgDh tbldycevtd uTDOciCUBOUNZSLnQY upcUNFJfUnoojjdgZUhw uphgkWePBRkukcLVGCLk usRjZdyeVetHMYKvt vMfhdMWDKrrhwyJxxuj vRjRiTtEeqIrZfRADA vtmctjcXKuDVza vwNwYAsuyOPdMRUGgNiOUKWrPB vxDlnbeugihjsVIMdUEbGNNi weollrcoqHA wiBUNILLKYbCVljnbnnzh wmJswkscRRhphOUtELE xHhfPeTMRxQqruTwenL xJwHjif xPaoTbctFSQsvVdkOzEMvRLEcE xeshqHIlSfnbBkBInwaBIHfUUm xxQLhoiegYeuhmgnHHayiFFDn yDKWYOieGlpdJLR yQJYILwSSUJykHlRS yYbcTuLaSqqkWLwQdZ yiVAUuSvkVJOM zENGTYzXKCPauQzazEXPb

Sharing