ff92cfd3c6dfd16083f57e29671634f8

General

Target
ff92cfd3c6dfd16083f57e29671634f8
Size 670KB
Sample220628-p3gmdshebr
SHA256 03d947ab0ea9aed2c22e2e8fbdd129ac694cdab71dabc20f14acfabe04255f59
MD5 ff92cfd3c6dfd16083f57e29671634f8
SHA1 8adc5e10539886950b4d4506fafc161ed8884d23
SHA512 a860b5f16a228e0da4e8abd4b09359d68667ae341f0d82d9fb0ca4e72b641e074700fc2fb9d2e23ef431a2b3d94310402f4f21021e7f233753d350f1f2577acc
SSDEEP 12288:jX7wUVmwpTPskD4mvV4eEY4jEgr4U34W+f++h/JW3JInOYzW+z136+ft7RI1r4Zq:jXcUNdVWan/3h7SNuu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ff92cfd3c6dfd16083f57e29671634f8

.dll 670KB

ff92cfd3c6dfd16083f57e29671634f8

IMPHASH 537d78f50d0b9931acbb9969393fc2df
SHA256 03d947ab0ea9aed2c22e2e8fbdd129ac694cdab71dabc20f14acfabe04255f59
MD5 ff92cfd3c6dfd16083f57e29671634f8
SHA1 8adc5e10539886950b4d4506fafc161ed8884d23
SHA512 a860b5f16a228e0da4e8abd4b09359d68667ae341f0d82d9fb0ca4e72b641e074700fc2fb9d2e23ef431a2b3d94310402f4f21021e7f233753d350f1f2577acc
SSDEEP 12288:jX7wUVmwpTPskD4mvV4eEY4jEgr4U34W+f++h/JW3JInOYzW+z136+ft7RI1r4Zq:jXcUNdVWan/3h7SNuu
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

32700

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetStdHandle CloseHandle SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW EnumSystemLocalesW WriteConsoleW IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapReAlloc OutputDebugStringW CreateFileW ReadFile GetTimeZoneInformation ReadConsoleW GetUserDefaultLCID VirtualAlloc GetCPInfo GetOEMCP GetACP IsValidCodePage GetLastError HeapFree HeapAlloc EncodePointer DecodePointer GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetProcessHeap ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW HeapSize RtlUnwindEx EnterCriticalSection LeaveCriticalSection RtlPcToFileHeader RaiseException SetLastError GetCurrentThread GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW FatalAppExitA SetConsoleCtrlHandler FreeLibrary LoadLibraryExW SetEnvironmentVariableA

user32

DispatchMessageW DefWindowProcW UpdateWindow EndPaint DestroyWindow TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW BeginPaint TranslateMessage GetTouchInputInfo RegisterClassExW RegisterTouchWindow InvalidateRect CloseTouchInputHandle LoadStringW ShowWindow UnregisterTouchWindow CreateWindowExW MessageBoxW

gdi32

LineTo DeleteObject SelectObject Polyline CreatePen MoveToEx

ole32

CoUninitialize CoInitialize CoCreateInstance

AgbPjIIpVgqthphoEDil BKSGZWoCdRRZ BZTksnRcUlhonwlz CjrsBMiBmkicdr CmPdXZgONRdo CqWBHGttYonxcMgEXtWmEV CqfdBAbUzJuk DllRegisterServer DnfTgZW DvCoyekegkndrsDH EKOwocbcIwdLHiNkmUrCl Efftvk FcnNOfBdAbvwh FhWBdzcrvdqNZpMbhTZIQreGg HDMQleZswu Hdeeaz HntGFSDqFuaXKvmdzc INyldipDCcKlVrKC IPLOzdLHDnJsRZZSfheCeC IaeOuzmqCryumRTPPskV JCAlkukqytGID JEGjndtWFlWFyoYbYUNYY JNYsjOB JkldymVNTbHmIbGniCoBGOzspu KalUpcZvvbCFIYCrlL KiaWQYuuSYHHyT LSrIHq LYfdtrLPTxBVKkteISWUm MWGNGWJ McgjRHNyPOogpyBYdDPYzsIQY MxlvDhnBlAPZjtlgeKtd NjvoTPmqDrPEXUABhNM NyIrRUUzWWpqvwMLPV OhSykoZko OqvdqWJRwTIFUYXDznqoQN OuXvnRTQQr OvMYipOdPUXdCkzws OvpzKEvLIdbKwHg PhRiOGJPimxM PqtcGEHjRRik QJDpWzH QQGjjFMISSsj RUDtQtmERxgvcUVIdt RdxJnVwvoXPqLpayiyx RgykWytxvwrwle SGPzEOBxTkskEptCHqzHIte SdRdRnKqAOHzB ShRJfN SpXdoShiJMKnXMZQRLoCod TALhteDRIHAoGVDBAmRzZL TNBGNcrxmWvbbtZJVvZJitVrk ToYhuDk USyLHMFTdqFHLuQw UWqlzwAYOhhNmXndjFJVnsXwPd UXaqGIpnPecWqTE WlltjEgpumpOTXCuaAyboQwJ XIqqijQw XpxfbuT YUzCTxdUqaW YucwvuLkfnHdBKVbSfXLBGl ZixRNYXKRekDfmCEYZoxzJ bUsYmprNYOLbGIE byHsisaMofkfyoDOtavNQrO cFcBoHO cQoMbidXbjBBMZd cjjABlZoJTtcvmD coLMrfARjIDNCxu dLDViNcdkqQliqGkidIZRVbJgM djRrAnnSnWinJbWNbd dkgxozstsmRlyGuop ewMBfqDHJ fTaVkagdLEWKEJOVGBjf fdnfYXBsqwTpWEcJBhNEHNTgQW gAyiZWdJHpORUWX gGeztnVsVCWLdNTVTIeloyD gJTUpx giMnkjMiGlCEDpqgOmiZ gylzVwTrSh hYAXzQyeUyJBDytBwxAITqDe iTRNBvmayaTMPvBcvJlXQPGg iULoPlbTSVTwynTFCSVE iXagMbgRuZCVL idOPTJlzrBuIq jpNttOWsoo jrtoSRnBzGBBnRolvQ kKSCBFikJKYCtQj kTQoQBJneyVuifo kaHKYCCiylRLUjbEW khhgxOMtBUBzjzzQXucUmB lqDzMqKtEYtKi mLsJOgFyg maWbEfiRBiAmHKJNVCEiOstByJ myJcLUzQSvByIK nAfsNiOjPSFY nBTSHBjKDbFEVc oJzZQfjAvPqutTezmIhkqrZE oMhSCyPPpNF oRAXmSYHGTnITuVY ofSDLgfNeeHbycQSiNLhLB oygfvoqUPduJzPADTzqR pHzgrLIAoFjM pMgeuEmNxBSpwSKEu qJxKtEtCuHDcffIGTqTqr qRhbeBwGaMjcCGwjAOrtB rBnENDY rGEvBopTURaavSamdDGjxw rYfXDWHai rkaGDDsTAZeFZIGZEIx sKOCvqKAWbIoyHcSW sMmANDkKtKSlz srZxruZWs tYKPgiqDRhpmQY uHNmzqvBHZvth uktFeTZq wcTAWwHxdQYtToyMegRVg weBiLMAFPtJnu xLsuLpLuLBqZVDDxaNCiyhpmw xdJAimscKJa xrQsbpELbFRUm yMHPbbjlNALXIomHFnhRe ybOyXv yeZGhUspKfEn yiwEbzdfNCFvYZsPHxcHBfkz yjNCDn yybFqbyhVPff zHCDbtQQb zOFcvrGXrNOLLvm zfbJOeFbtt zkDheLpUsulhmkWwTYkBEwi znHHHKzQsbiMRY

Sharing

General

Malware Config

Signatures

File Explorer

ff92cfd3c6dfd16083f57e29671634f8

kernel32

user32

gdi32

ole32