e871ed42aa76523d9339afb7bb5b06a4

General

Target
e871ed42aa76523d9339afb7bb5b06a4
Size 366KB
Sample220628-3tznhadccn
SHA256 b9caedf4d19bf6cc1ca6f4f41e3307be1a6ccc1a7de3eb04c852d39f33bbeeeb
MD5 e871ed42aa76523d9339afb7bb5b06a4
SHA1 4dbbec9bf85a6a3bab32367ede19562f7cd2aed8
SHA512 cd82f5e3d91acfec3e6b1d5be167d48839e0a04b5fd93e8e478135f20b2ded1b39355e54fd77db68104c7c83b93b464e3872d455bb12c6e33111e68f6c0ee0d5
SSDEEP 6144:hgnfTUyPXWbm30TFSPkCHvEhTKp73Di9L7XWdzDf7YfTvD0ZiF5slk5fd7bVv:hgnx+W0T8HMhwzWd69f7YfrYQgODv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e871ed42aa76523d9339afb7bb5b06a4

.dll 366KB

e871ed42aa76523d9339afb7bb5b06a4

IMPHASH dfe71ea3b85a666eef05134056ae9d05
SHA256 b9caedf4d19bf6cc1ca6f4f41e3307be1a6ccc1a7de3eb04c852d39f33bbeeeb
MD5 e871ed42aa76523d9339afb7bb5b06a4
SHA1 4dbbec9bf85a6a3bab32367ede19562f7cd2aed8
SHA512 cd82f5e3d91acfec3e6b1d5be167d48839e0a04b5fd93e8e478135f20b2ded1b39355e54fd77db68104c7c83b93b464e3872d455bb12c6e33111e68f6c0ee0d5
SSDEEP 6144:hgnfTUyPXWbm30TFSPkCHvEhTKp73Di9L7XWdzDf7YfTvD0ZiF5slk5fd7bVv:hgnx+W0T8HMhwzWd69f7YfrYQgODv
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17724

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW HeapReAlloc OutputDebugStringW GetCPInfo SetFilePointerEx GetACP IsValidCodePage LoadLibraryExW FreeLibrary FatalAppExitA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale CloseHandle SetStdHandle WriteConsoleW CreateFileW GetOEMCP VirtualAlloc EncodePointer DecodePointer GetLastError HeapFree HeapAlloc GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetProcessHeap ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW HeapSize RtlUnwindEx EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThread GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW RaiseException

user32

EndPaint DestroyWindow SetGestureConfig TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW BeginPaint TranslateMessage RegisterClassExW LoadStringW ShowWindow CreateWindowExW UpdateWindow DefWindowProcW DispatchMessageW ScreenToClient GetGestureInfo InvalidateRect CloseGestureInfoHandle

gdi32

LineTo DeleteObject SelectObject Polyline CreatePen MoveToEx

Sharing

General

Malware Config

Signatures

File Explorer

e871ed42aa76523d9339afb7bb5b06a4

kernel32

user32

gdi32