26f6f7a0e8772047820bfa945c65d8bb

Sharing

Copy URL Twitter E-mail

General

Target
26f6f7a0e8772047820bfa945c65d8bb
Size 678KB
Sample220628-218pbaege7
SHA256 e73643e7744ff4c37d1737d761ea364db277b954405a2e8d2e14018fa797d1fd
MD5 26f6f7a0e8772047820bfa945c65d8bb
SHA1 ceb4b97c93599c9f63e3efce0fd66c26abd1b8fb
SHA512 2f4812f0a8d0a14bd520bd9fc5bdb43fcc7f6673d101b6ffa225514e539599b39eb4e634aca7870cb9a72b2ad19696f0446074c6d5932a4b53cacfb0b61872cb
SSDEEP 12288:e6B62yPpoXgO82uPhpzL0jpqHKX4XWTP7IOvyOZDnSujSmn0jg3stASh:e6BnIWyOBdneg3JK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

26f6f7a0e8772047820bfa945c65d8bb

.dll 678KB

26f6f7a0e8772047820bfa945c65d8bb

IMPHASH 97b3967e1bc8c38f6526403487e2cc51
SHA256 e73643e7744ff4c37d1737d761ea364db277b954405a2e8d2e14018fa797d1fd
MD5 26f6f7a0e8772047820bfa945c65d8bb
SHA1 ceb4b97c93599c9f63e3efce0fd66c26abd1b8fb
SHA512 2f4812f0a8d0a14bd520bd9fc5bdb43fcc7f6673d101b6ffa225514e539599b39eb4e634aca7870cb9a72b2ad19696f0446074c6d5932a4b53cacfb0b61872cb
SSDEEP 12288:e6B62yPpoXgO82uPhpzL0jpqHKX4XWTP7IOvyOZDnSujSmn0jg3stASh:e6BnIWyOBdneg3JK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17092

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

CreatePen DeleteObject LineTo MoveToEx Polyline SelectObject

ole32

CoCreateInstance CoInitialize CoUninitialize

user32

BeginPaint CloseTouchInputHandle CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EndPaint GetMessageW GetTouchInputInfo InvalidateRect LoadCursorW LoadStringW MessageBoxW PostQuitMessage RegisterClassExW RegisterTouchWindow ShowWindow TranslateAcceleratorW TranslateMessage UnregisterTouchWindow UpdateWindow

kernel32

CloseHandle CompareStringW CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeFormatW GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc WideCharToMultiByte WriteConsoleW WriteFile

AgbPjIIpVgqthphoEDil BKSGZWoCdRRZ BZTksnRcUlhonwlz CjrsBMiBmkicdr CmPdXZgONRdo CqWBHGttYonxcMgEXtWmEV CqfdBAbUzJuk DllRegisterServer DnfTgZW DvCoyekegkndrsDH EKOwocbcIwdLHiNkmUrCl Efftvk FcnNOfBdAbvwh FhWBdzcrvdqNZpMbhTZIQreGg HDMQleZswu Hdeeaz HntGFSDqFuaXKvmdzc INyldipDCcKlVrKC IPLOzdLHDnJsRZZSfheCeC IaeOuzmqCryumRTPPskV JCAlkukqytGID JEGjndtWFlWFyoYbYUNYY JNYsjOB JkldymVNTbHmIbGniCoBGOzspu KalUpcZvvbCFIYCrlL KiaWQYuuSYHHyT LSrIHq LYfdtrLPTxBVKkteISWUm MWGNGWJ McgjRHNyPOogpyBYdDPYzsIQY MxlvDhnBlAPZjtlgeKtd NjvoTPmqDrPEXUABhNM NyIrRUUzWWpqvwMLPV OhSykoZko OqvdqWJRwTIFUYXDznqoQN OuXvnRTQQr OvMYipOdPUXdCkzws OvpzKEvLIdbKwHg PhRiOGJPimxM PqtcGEHjRRik QJDpWzH QQGjjFMISSsj RUDtQtmERxgvcUVIdt RdxJnVwvoXPqLpayiyx RgykWytxvwrwle SGPzEOBxTkskEptCHqzHIte SdRdRnKqAOHzB ShRJfN SpXdoShiJMKnXMZQRLoCod TALhteDRIHAoGVDBAmRzZL TNBGNcrxmWvbbtZJVvZJitVrk ToYhuDk USyLHMFTdqFHLuQw UWqlzwAYOhhNmXndjFJVnsXwPd UXaqGIpnPecWqTE WlltjEgpumpOTXCuaAyboQwJ XIqqijQw XpxfbuT YUzCTxdUqaW YucwvuLkfnHdBKVbSfXLBGl ZixRNYXKRekDfmCEYZoxzJ bUsYmprNYOLbGIE byHsisaMofkfyoDOtavNQrO cFcBoHO cQoMbidXbjBBMZd cjjABlZoJTtcvmD coLMrfARjIDNCxu dLDViNcdkqQliqGkidIZRVbJgM djRrAnnSnWinJbWNbd dkgxozstsmRlyGuop ewMBfqDHJ fTaVkagdLEWKEJOVGBjf fdnfYXBsqwTpWEcJBhNEHNTgQW gAyiZWdJHpORUWX gGeztnVsVCWLdNTVTIeloyD gJTUpx giMnkjMiGlCEDpqgOmiZ gylzVwTrSh hYAXzQyeUyJBDytBwxAITqDe iTRNBvmayaTMPvBcvJlXQPGg iULoPlbTSVTwynTFCSVE iXagMbgRuZCVL idOPTJlzrBuIq jpNttOWsoo jrtoSRnBzGBBnRolvQ kKSCBFikJKYCtQj kTQoQBJneyVuifo kaHKYCCiylRLUjbEW khhgxOMtBUBzjzzQXucUmB lqDzMqKtEYtKi mLsJOgFyg maWbEfiRBiAmHKJNVCEiOstByJ myJcLUzQSvByIK nAfsNiOjPSFY nBTSHBjKDbFEVc oJzZQfjAvPqutTezmIhkqrZE oMhSCyPPpNF oRAXmSYHGTnITuVY ofSDLgfNeeHbycQSiNLhLB oygfvoqUPduJzPADTzqR pHzgrLIAoFjM pMgeuEmNxBSpwSKEu qJxKtEtCuHDcffIGTqTqr qRhbeBwGaMjcCGwjAOrtB rBnENDY rGEvBopTURaavSamdDGjxw rYfXDWHai rkaGDDsTAZeFZIGZEIx sKOCvqKAWbIoyHcSW sMmANDkKtKSlz srZxruZWs tYKPgiqDRhpmQY uHNmzqvBHZvth uktFeTZq wcTAWwHxdQYtToyMegRVg weBiLMAFPtJnu xLsuLpLuLBqZVDDxaNCiyhpmw xdJAimscKJa xrQsbpELbFRUm yMHPbbjlNALXIomHFnhRe ybOyXv yeZGhUspKfEn yiwEbzdfNCFvYZsPHxcHBfkz yjNCDn yybFqbyhVPff zHCDbtQQb zOFcvrGXrNOLLvm zfbJOeFbtt zkDheLpUsulhmkWwTYkBEwi znHHHKzQsbiMRY

Name

.text

Size

371KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

108B

Characteristics

Name

.voltbl

Size

512B

Virtual Size

84B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ