cfac837aec133676b0c9290aae23a9a7

General

Target
cfac837aec133676b0c9290aae23a9a7
Size 366KB
Sample220628-197ypscgbp
SHA256 0db876ab86cc44f13768dbbfe213516e6ec8ade367f1ea0df73d377402bbbf4c
MD5 cfac837aec133676b0c9290aae23a9a7
SHA1 b251d76d9665c15d041c9554072d884cf42123e7
SHA512 70e673cf166752d6ec538796cb1649beee91c19d91071b7f5931065fa71747fd546188aebd3b60ec94e4e47c6bf65466263b3524b1bd668219eb3620007d3912
SSDEEP 6144:hgnfTUyPXWbm30TFSPkCHEEhTKp73Di9L7XWdzDf7YfTvD0ZiF5slk5fd7bVv:hgnx+W0T8HNhwzWd69f7YfrYQgODv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cfac837aec133676b0c9290aae23a9a7

.dll 366KB

cfac837aec133676b0c9290aae23a9a7

IMPHASH dfe71ea3b85a666eef05134056ae9d05
SHA256 0db876ab86cc44f13768dbbfe213516e6ec8ade367f1ea0df73d377402bbbf4c
MD5 cfac837aec133676b0c9290aae23a9a7
SHA1 b251d76d9665c15d041c9554072d884cf42123e7
SHA512 70e673cf166752d6ec538796cb1649beee91c19d91071b7f5931065fa71747fd546188aebd3b60ec94e4e47c6bf65466263b3524b1bd668219eb3620007d3912
SSDEEP 6144:hgnfTUyPXWbm30TFSPkCHEEhTKp73Di9L7XWdzDf7YfTvD0ZiF5slk5fd7bVv:hgnx+W0T8HNhwzWd69f7YfrYQgODv
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17724

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW HeapReAlloc OutputDebugStringW GetCPInfo SetFilePointerEx GetACP IsValidCodePage LoadLibraryExW FreeLibrary FatalAppExitA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale CloseHandle SetStdHandle WriteConsoleW CreateFileW GetOEMCP VirtualAlloc EncodePointer DecodePointer GetLastError HeapFree HeapAlloc GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetProcessHeap ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW HeapSize RtlUnwindEx EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThread GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW RaiseException

user32

EndPaint DestroyWindow SetGestureConfig TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW BeginPaint TranslateMessage RegisterClassExW LoadStringW ShowWindow CreateWindowExW UpdateWindow DefWindowProcW DispatchMessageW ScreenToClient GetGestureInfo InvalidateRect CloseGestureInfoHandle

gdi32

LineTo DeleteObject SelectObject Polyline CreatePen MoveToEx

Sharing

General

Malware Config

Signatures

File Explorer

cfac837aec133676b0c9290aae23a9a7

kernel32

user32

gdi32