6e019448a8ed66f8d483dcc606947c05

Sharing

Copy URL Twitter E-mail

General

Target
6e019448a8ed66f8d483dcc606947c05
Size 678KB
Sample220628-tdb3tsccg4
SHA256 34c1b41fcf0ad507a5160139aa149f7fd61f52aa4ad9f626eaa2d758cfce8a15
MD5 6e019448a8ed66f8d483dcc606947c05
SHA1 d12f7ffa9f938fb0bb84c077ad4a0fa5de9bcb73
SHA512 ad88a7d1fe54f9b694e6316c0dfb3c864fe8c84ee62ca2c025239384533738b1a5d62c4b7036fb3b886fd57dec89d01ae17c2e74db276639c36b19e5cca12721
SSDEEP 12288:e6B62yPpoXgO82uPhpzL0jpqHKX4XWTP7IOvyOZDnSujSm40jg3stASh:e6BnIWyOBd4eg3JK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6e019448a8ed66f8d483dcc606947c05

.dll 678KB

6e019448a8ed66f8d483dcc606947c05

IMPHASH 97b3967e1bc8c38f6526403487e2cc51
SHA256 34c1b41fcf0ad507a5160139aa149f7fd61f52aa4ad9f626eaa2d758cfce8a15
MD5 6e019448a8ed66f8d483dcc606947c05
SHA1 d12f7ffa9f938fb0bb84c077ad4a0fa5de9bcb73
SHA512 ad88a7d1fe54f9b694e6316c0dfb3c864fe8c84ee62ca2c025239384533738b1a5d62c4b7036fb3b886fd57dec89d01ae17c2e74db276639c36b19e5cca12721
SSDEEP 12288:e6B62yPpoXgO82uPhpzL0jpqHKX4XWTP7IOvyOZDnSujSm40jg3stASh:e6BnIWyOBd4eg3JK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17092

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

CreatePen DeleteObject LineTo MoveToEx Polyline SelectObject

ole32

CoCreateInstance CoInitialize CoUninitialize

user32

BeginPaint CloseTouchInputHandle CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EndPaint GetMessageW GetTouchInputInfo InvalidateRect LoadCursorW LoadStringW MessageBoxW PostQuitMessage RegisterClassExW RegisterTouchWindow ShowWindow TranslateAcceleratorW TranslateMessage UnregisterTouchWindow UpdateWindow

kernel32

CloseHandle CompareStringW CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeFormatW GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc WideCharToMultiByte WriteConsoleW WriteFile

AgbPjIIpVgqthphoEDil BKSGZWoCdRRZ BZTksnRcUlhonwlz CjrsBMiBmkicdr CmPdXZgONRdo CqWBHGttYonxcMgEXtWmEV CqfdBAbUzJuk DllRegisterServer DnfTgZW DvCoyekegkndrsDH EKOwocbcIwdLHiNkmUrCl Efftvk FcnNOfBdAbvwh FhWBdzcrvdqNZpMbhTZIQreGg HDMQleZswu Hdeeaz HntGFSDqFuaXKvmdzc INyldipDCcKlVrKC IPLOzdLHDnJsRZZSfheCeC IaeOuzmqCryumRTPPskV JCAlkukqytGID JEGjndtWFlWFyoYbYUNYY JNYsjOB JkldymVNTbHmIbGniCoBGOzspu KalUpcZvvbCFIYCrlL KiaWQYuuSYHHyT LSrIHq LYfdtrLPTxBVKkteISWUm MWGNGWJ McgjRHNyPOogpyBYdDPYzsIQY MxlvDhnBlAPZjtlgeKtd NjvoTPmqDrPEXUABhNM NyIrRUUzWWpqvwMLPV OhSykoZko OqvdqWJRwTIFUYXDznqoQN OuXvnRTQQr OvMYipOdPUXdCkzws OvpzKEvLIdbKwHg PhRiOGJPimxM PqtcGEHjRRik QJDpWzH QQGjjFMISSsj RUDtQtmERxgvcUVIdt RdxJnVwvoXPqLpayiyx RgykWytxvwrwle SGPzEOBxTkskEptCHqzHIte SdRdRnKqAOHzB ShRJfN SpXdoShiJMKnXMZQRLoCod TALhteDRIHAoGVDBAmRzZL TNBGNcrxmWvbbtZJVvZJitVrk ToYhuDk USyLHMFTdqFHLuQw UWqlzwAYOhhNmXndjFJVnsXwPd UXaqGIpnPecWqTE WlltjEgpumpOTXCuaAyboQwJ XIqqijQw XpxfbuT YUzCTxdUqaW YucwvuLkfnHdBKVbSfXLBGl ZixRNYXKRekDfmCEYZoxzJ bUsYmprNYOLbGIE byHsisaMofkfyoDOtavNQrO cFcBoHO cQoMbidXbjBBMZd cjjABlZoJTtcvmD coLMrfARjIDNCxu dLDViNcdkqQliqGkidIZRVbJgM djRrAnnSnWinJbWNbd dkgxozstsmRlyGuop ewMBfqDHJ fTaVkagdLEWKEJOVGBjf fdnfYXBsqwTpWEcJBhNEHNTgQW gAyiZWdJHpORUWX gGeztnVsVCWLdNTVTIeloyD gJTUpx giMnkjMiGlCEDpqgOmiZ gylzVwTrSh hYAXzQyeUyJBDytBwxAITqDe iTRNBvmayaTMPvBcvJlXQPGg iULoPlbTSVTwynTFCSVE iXagMbgRuZCVL idOPTJlzrBuIq jpNttOWsoo jrtoSRnBzGBBnRolvQ kKSCBFikJKYCtQj kTQoQBJneyVuifo kaHKYCCiylRLUjbEW khhgxOMtBUBzjzzQXucUmB lqDzMqKtEYtKi mLsJOgFyg maWbEfiRBiAmHKJNVCEiOstByJ myJcLUzQSvByIK nAfsNiOjPSFY nBTSHBjKDbFEVc oJzZQfjAvPqutTezmIhkqrZE oMhSCyPPpNF oRAXmSYHGTnITuVY ofSDLgfNeeHbycQSiNLhLB oygfvoqUPduJzPADTzqR pHzgrLIAoFjM pMgeuEmNxBSpwSKEu qJxKtEtCuHDcffIGTqTqr qRhbeBwGaMjcCGwjAOrtB rBnENDY rGEvBopTURaavSamdDGjxw rYfXDWHai rkaGDDsTAZeFZIGZEIx sKOCvqKAWbIoyHcSW sMmANDkKtKSlz srZxruZWs tYKPgiqDRhpmQY uHNmzqvBHZvth uktFeTZq wcTAWwHxdQYtToyMegRVg weBiLMAFPtJnu xLsuLpLuLBqZVDDxaNCiyhpmw xdJAimscKJa xrQsbpELbFRUm yMHPbbjlNALXIomHFnhRe ybOyXv yeZGhUspKfEn yiwEbzdfNCFvYZsPHxcHBfkz yjNCDn yybFqbyhVPff zHCDbtQQb zOFcvrGXrNOLLvm zfbJOeFbtt zkDheLpUsulhmkWwTYkBEwi znHHHKzQsbiMRY

Name

.text

Size

371KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

108B

Characteristics

Name

.voltbl

Size

512B

Virtual Size

84B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ