58ywkCFNLuReoU5tcydLCs0[.]dlll

General

Target
58ywkCFNLuReoU5tcydLCs0.dlll
Size 669KB
Sample220624-k3armabcfj
SHA256 4e264bbf2e9afbd0c0d3ec144cc81d373c450fd5cec7d930badaf6f14854fd39
MD5 cdda9b135c7994d7c173d92cac1d1dfd
SHA1 6ec4e0f5794a9a7f5059c31f92634ad6f9a0e6e1
SHA512 84b5686b87348beb6a42095b2560aa582ca1f168ad9f762d87d4472424cacd9ff7db0925e7c19c8182fa81870e18be1e589310855fe99726fcf2aea5d8c4f13b
SSDEEP 12288:i6ga9aSRQTSq4RxN46G6463za48ukW+0+HOZ26u3SaYuUVDJe07zEHC68xCNI9pm:Zga9aSRQS2bSB33elNOREYxyH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

58ywkCFNLuReoU5tcydLCs0.dlll

.dll 669KB

58ywkCFNLuReoU5tcydLCs0.dlll

IMPHASH 208d0cc211620e212f602a360cc4d858
SHA256 4e264bbf2e9afbd0c0d3ec144cc81d373c450fd5cec7d930badaf6f14854fd39
MD5 cdda9b135c7994d7c173d92cac1d1dfd
SHA1 6ec4e0f5794a9a7f5059c31f92634ad6f9a0e6e1
SHA512 84b5686b87348beb6a42095b2560aa582ca1f168ad9f762d87d4472424cacd9ff7db0925e7c19c8182fa81870e18be1e589310855fe99726fcf2aea5d8c4f13b
SSDEEP 12288:i6ga9aSRQTSq4RxN46G6463za48ukW+0+HOZ26u3SaYuUVDJe07zEHC68xCNI9pm:Zga9aSRQS2bSB33elNOREYxyH
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

210652

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

LoadLibraryExW VirtualAlloc CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW FreeLibrary GetTimeZoneInformation SetConsoleCtrlHandler HeapReAlloc GetOEMCP IsValidCodePage SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle GetACP GetModuleFileNameW WriteFile FreeEnvironmentStringsW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx HeapAlloc FatalAppExitA GetCPInfo IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW GetProcAddress CreateSemaphoreW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetCurrentThread GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetEnvironmentVariableA

user32

DispatchMessageW DefWindowProcW UpdateWindow CreateWindowExW EndPaint DestroyWindow TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW BeginPaint TranslateMessage RegisterClassExW LoadStringW ShowWindow

ole32

CoCreateInstance CoUninitialize CoInitialize CoCreateFreeThreadedMarshaler

AYRaZTFPCxwD AnvLNLvRPMOEIDuRixyXR ArEzncYNGWYiEVvSkgXNr BDAjqmXhNInAGTXuDMHksysK BEEiDttVANjnOvY DKMIqKrCd DbofLPeAyMP DllRegisterServer DrqdnwHnyFKpzuCRHTUWLXXqYg EcDaVnIbDiChPrGpDmF EoeNXolAfbVEMWcaxYh FBAHap FSAALeix FdWGRkQaxQJiOrePeqj FlVBBwVcaFcQCVxGhraArMR FtpeGXDPEuExaaNpzsIeBQ FuwxzqAGmEDMkAuXoT GDnHNSsqpfyGrGbAZJUb GVMxIpEBoRVsbMFTpyArFp HGHFSYeqAYhTsdSJDXZgBFlU HQdWdiZU IKrixFMVvzZ IXXXhowFaeyXGit IfRZmOd IwlFMIQGuxZdxzpWrhCGu JdUZMjUjDhqjhbaYhXYRfs JhigxRuMvwrT JnJJWYQhUv KdjlgNlsxOBGaWcBQVkPNFoGmN KlvIzoVUScGDVHVhBJLZkuz LGVdwmIDAJxmCpwSywmXUsls LYdhJTDZaGVlOpJvXap LmZpErVizT LorebZKWhsCgBZp LyzfFjqRjgmuKJzjGlHVTZ MQdizTSye NjPdZMSLpSDlhQMepoAyhsFime NnHRQuUOS NnRFewUHJzPmgrral OBkeOrSrWOFGxeEDPnjSkj OeWuzCaqFKzvvgkZiQDxyTvg OiFntqGzU PRWKsH PidokiExuJppfPBHlhjRPis QscQvtaYvYAzz QxDcxyFIPtHAUErqdpOcBE RAYoeBZmjaV RPmwtNiPVGu SonuehWFvPeVyVm TBAkzC TBaNAaXskUWLudKTfyAdIe TMwsJzIGCXmFmCKBi TVBpTlYprRGSaEoFfIxjCdP ThbQstRORmmJcK TmoUOV TnAwwZjtWu UgBvHdzxcuZuRY UpPxOdlbJRblT VJqucOrUVSnoHXKYek VgaTYgXKbQxlYeumHvQ WGLOfHKfFOExD WRXZdBIS YpeGNYIlJKsg ZJaUxDoLkCiasBrQdEl ZUFtPItgDRcIyijFwU aNgGQIyZNIzfz aWeDUCOKpWAsYu bCESysj bXaDLJYlKFgoYNXOE bdnBPuoAkfgtSBVlmtNhkinPvH botNVqzUQYnZvJYJwkngZBhB czVqRnqsrCPu eJKFkCiMRpNeOb eSzaQRMzfkBFCxMbIRISvyvh fJOdGjxSTx fcAcUbhtY fyRkwSJbPotpIBbqoVifuLYyx gBMepPjYkTCAExbXhmIR hmkvDpwJItTVpHecHyuBx hoCDzqmfBJM hvhcXtWHY hyKzdlx iFflcxvN iKrtjFKchRuPguHU iMhHRtUsP icHxJwD itjbLf ixvnwlpVdfz jWYoxL jbulnnIbCVMTaHOVU kAeMbCNgXKAw kpTgoIDflkumnJLSjPxzShB lLYSgyozrF lTZJFrtWAjFNMYREmfsZUmAuRA lwPmvdPpxvKrio mScLhyOKEfSOrRiUvpQlSbv mTnPkqR myKZSWXqmDONAxI ngIJGtqgoDdHakvVRuui oHfdeikXYTUZ oInONJi oRzgrTDnDX pbHQkyAwBNjarfsAL qJREnWvuNqCJjGvY qRotcKrrpxPTTImqed qUBKoRJWpFWBbXMT qrjEGBlqowYhfuOtdwc rjRdUINYLuFBwfAgASMMjG sCcwoiMDslQJvxOjYy sbTjVUFjeMBbyiPiunM trPMEWhlXdfNFuaQIEOIMvxcmw uPlSdTUZvQlzlnqM uVWaeDdCKrP uZfNllZmtgrWHDxBPqKbduMBpp vBBrriFQ wVOypfRCqAXzWEBMRUweVl wkhIOCbDnEmCLQBKX wpGFhxvRWQwoQmtgBSQRq wxrZDt xHVdAgrCYbaCyzbBgpXYFcw xVUpsXCcoRqSMAgzaSScz yftwIgnbYiQFWFJuJxmDduVce yjLZZLqmZcy zMErzxIAY zRGdrgdbzFiZg zaitlNnIJp zrvgrfVFQPpIjXph zuldATrbPvznvRYlMWBdBgqK zxTuoXpCMwsIgiq

Sharing