aiuJGv7rj3dw4wf6e8s3k4wkwUzzPonrUjX[.]dll[.]vir

General

Target
aiuJGv7rj3dw4wf6e8s3k4wkwUzzPonrUjX.dll.vir
Size 316KB
Sample220623-xpr5zaegbr
SHA256 a7625caeecfa5d0193b571ff4bc29b7c8ee9bebd4359847c45f1591686b474ff
MD5 60a555c50c61e19eb3eb805b87b3b55a
SHA1 069d4bd035d4812949ecc85bcdd3e5a40732a0e1
SHA512 88e0638218985ddfdb7a295eceefea4c92d6c7e312add25a34773411d07dbf3705f72760d40a2dbaf6dd97eb9d13d8a82bd0ff435ad3a2712087d8d4d7d74f7e
SSDEEP 6144:qon8A+JGAJO3nPlOJID2lAQNed5fzLoj5nL8jtdKxmLNXSU:P8A+JGb3n4JdtIYLEnXV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

aiuJGv7rj3dw4wf6e8s3k4wkwUzzPonrUjX.dll.vir

.dll 316KB

aiuJGv7rj3dw4wf6e8s3k4wkwUzzPonrUjX.dll.vir

IMPHASH 73f2e145d0122febd498c144642f6a32
SHA256 a7625caeecfa5d0193b571ff4bc29b7c8ee9bebd4359847c45f1591686b474ff
MD5 60a555c50c61e19eb3eb805b87b3b55a
SHA1 069d4bd035d4812949ecc85bcdd3e5a40732a0e1
SHA512 88e0638218985ddfdb7a295eceefea4c92d6c7e312add25a34773411d07dbf3705f72760d40a2dbaf6dd97eb9d13d8a82bd0ff435ad3a2712087d8d4d7d74f7e
SSDEEP 6144:qon8A+JGAJO3nPlOJID2lAQNed5fzLoj5nL8jtdKxmLNXSU:P8A+JGb3n4JdtIYLEnXV
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

7760

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

VirtualAlloc LoadLibraryExW WriteConsoleW CreateFileW CloseHandle HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetStringTypeW SetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar

user32

EndPaint BeginPaint UpdateWindow PostQuitMessage GetMessageW DefWindowProcW DestroyWindow CreateWindowExW RegisterClassExW LoadStringW ShowWindow DispatchMessageW TranslateAcceleratorW TranslateMessage LoadCursorW

ole32

CoUninitialize CoCreateInstance CoCreateFreeThreadedMarshaler CoInitialize

AYRaZTFPCxwD AnvLNLvRPMOEIDuRixyXR ArEzncYNGWYiEVvSkgXNr BDAjqmXhNInAGTXuDMHksysK BEEiDttVANjnOvY DKMIqKrCd DbofLPeAyMP DllRegisterServer DrqdnwHnyFKpzuCRHTUWLXXqYg EcDaVnIbDiChPrGpDmF EoeNXolAfbVEMWcaxYh FBAHap FSAALeix FdWGRkQaxQJiOrePeqj FlVBBwVcaFcQCVxGhraArMR FtpeGXDPEuExaaNpzsIeBQ FuwxzqAGmEDMkAuXoT GDnHNSsqpfyGrGbAZJUb GVMxIpEBoRVsbMFTpyArFp HGHFSYeqAYhTsdSJDXZgBFlU HQdWdiZU IKrixFMVvzZ IXXXhowFaeyXGit IfRZmOd IwlFMIQGuxZdxzpWrhCGu JdUZMjUjDhqjhbaYhXYRfs JhigxRuMvwrT JnJJWYQhUv KdjlgNlsxOBGaWcBQVkPNFoGmN KlvIzoVUScGDVHVhBJLZkuz LGVdwmIDAJxmCpwSywmXUsls LYdhJTDZaGVlOpJvXap LmZpErVizT LorebZKWhsCgBZp LyzfFjqRjgmuKJzjGlHVTZ MQdizTSye NjPdZMSLpSDlhQMepoAyhsFime NnHRQuUOS NnRFewUHJzPmgrral OBkeOrSrWOFGxeEDPnjSkj OeWuzCaqFKzvvgkZiQDxyTvg OiFntqGzU PRWKsH PidokiExuJppfPBHlhjRPis QscQvtaYvYAzz QxDcxyFIPtHAUErqdpOcBE RAYoeBZmjaV RPmwtNiPVGu SonuehWFvPeVyVm TBAkzC TBaNAaXskUWLudKTfyAdIe TMwsJzIGCXmFmCKBi TVBpTlYprRGSaEoFfIxjCdP ThbQstRORmmJcK TmoUOV TnAwwZjtWu UgBvHdzxcuZuRY UpPxOdlbJRblT VJqucOrUVSnoHXKYek VgaTYgXKbQxlYeumHvQ WGLOfHKfFOExD WRXZdBIS YpeGNYIlJKsg ZJaUxDoLkCiasBrQdEl ZUFtPItgDRcIyijFwU aNgGQIyZNIzfz aWeDUCOKpWAsYu bCESysj bXaDLJYlKFgoYNXOE bdnBPuoAkfgtSBVlmtNhkinPvH botNVqzUQYnZvJYJwkngZBhB czVqRnqsrCPu eJKFkCiMRpNeOb eSzaQRMzfkBFCxMbIRISvyvh fJOdGjxSTx fcAcUbhtY fyRkwSJbPotpIBbqoVifuLYyx gBMepPjYkTCAExbXhmIR hmkvDpwJItTVpHecHyuBx hoCDzqmfBJM hvhcXtWHY hyKzdlx iFflcxvN iKrtjFKchRuPguHU iMhHRtUsP icHxJwD itjbLf ixvnwlpVdfz jWYoxL jbulnnIbCVMTaHOVU kAeMbCNgXKAw kpTgoIDflkumnJLSjPxzShB lLYSgyozrF lTZJFrtWAjFNMYREmfsZUmAuRA lwPmvdPpxvKrio mScLhyOKEfSOrRiUvpQlSbv mTnPkqR myKZSWXqmDONAxI ngIJGtqgoDdHakvVRuui oHfdeikXYTUZ oInONJi oRzgrTDnDX pbHQkyAwBNjarfsAL qJREnWvuNqCJjGvY qRotcKrrpxPTTImqed qUBKoRJWpFWBbXMT qrjEGBlqowYhfuOtdwc rjRdUINYLuFBwfAgASMMjG sCcwoiMDslQJvxOjYy sbTjVUFjeMBbyiPiunM trPMEWhlXdfNFuaQIEOIMvxcmw uPlSdTUZvQlzlnqM uVWaeDdCKrP uZfNllZmtgrWHDxBPqKbduMBpp vBBrriFQ wVOypfRCqAXzWEBMRUweVl wkhIOCbDnEmCLQBKX wpGFhxvRWQwoQmtgBSQRq wxrZDt xHVdAgrCYbaCyzbBgpXYFcw xVUpsXCcoRqSMAgzaSScz yftwIgnbYiQFWFJuJxmDduVce yjLZZLqmZcy zMErzxIAY zRGdrgdbzFiZg zaitlNnIJp zrvgrfVFQPpIjXph zuldATrbPvznvRYlMWBdBgqK zxTuoXpCMwsIgiq

Name

.text

Size

91KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

aiuJGv7rj3dw4wf6e8s3k4wkwUzzPonrUjX.dll.vir

kernel32

user32

ole32