f7d5010d0e830dd3ad9b0edb74646b67

Sharing

Copy URL Twitter E-mail

General

Target
f7d5010d0e830dd3ad9b0edb74646b67
Size 676KB
Sample220628-tdcdlaaegm
SHA256 ab74499fe722118672a799b25b00cb22d0b70872cf2e5af4fe63cd3a7b0fab65
MD5 f7d5010d0e830dd3ad9b0edb74646b67
SHA1 94029f48c2a97c3bdba603b7027d0a17a496e45d
SHA512 27aa72621345b05300f3ad86e4f3fc2b3014ed66f4dcf523a2e6656efc526d68aac48122632dc2c32de4a806f8e725b6133e51061617fa313f70f0cd96737b3d
SSDEEP 12288:+MB5HR/Z4XgO82uPhpzL0jpqHK+4XWTPb4uvqkZoe+s1uwxlicGDhqy6Eacv+82:+MBJ42qkQc3icGDnJ+8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f7d5010d0e830dd3ad9b0edb74646b67

.dll 676KB

f7d5010d0e830dd3ad9b0edb74646b67

IMPHASH 97b3967e1bc8c38f6526403487e2cc51
SHA256 ab74499fe722118672a799b25b00cb22d0b70872cf2e5af4fe63cd3a7b0fab65
MD5 f7d5010d0e830dd3ad9b0edb74646b67
SHA1 94029f48c2a97c3bdba603b7027d0a17a496e45d
SHA512 27aa72621345b05300f3ad86e4f3fc2b3014ed66f4dcf523a2e6656efc526d68aac48122632dc2c32de4a806f8e725b6133e51061617fa313f70f0cd96737b3d
SSDEEP 12288:+MB5HR/Z4XgO82uPhpzL0jpqHK+4XWTPb4uvqkZoe+s1uwxlicGDhqy6Eacv+82:+MBJ42qkQc3icGDnJ+8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17092

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

CreatePen DeleteObject LineTo MoveToEx Polyline SelectObject

ole32

CoCreateInstance CoInitialize CoUninitialize

user32

BeginPaint CloseTouchInputHandle CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EndPaint GetMessageW GetTouchInputInfo InvalidateRect LoadCursorW LoadStringW MessageBoxW PostQuitMessage RegisterClassExW RegisterTouchWindow ShowWindow TranslateAcceleratorW TranslateMessage UnregisterTouchWindow UpdateWindow

kernel32

CloseHandle CompareStringW CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeFormatW GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc WideCharToMultiByte WriteConsoleW WriteFile

AgbPjIIpVgqthphoEDil BKSGZWoCdRRZ BZTksnRcUlhonwlz CjrsBMiBmkicdr CmPdXZgONRdo CqWBHGttYonxcMgEXtWmEV CqfdBAbUzJuk DllRegisterServer DnfTgZW DvCoyekegkndrsDH EKOwocbcIwdLHiNkmUrCl Efftvk FcnNOfBdAbvwh FhWBdzcrvdqNZpMbhTZIQreGg HDMQleZswu Hdeeaz HntGFSDqFuaXKvmdzc INyldipDCcKlVrKC IPLOzdLHDnJsRZZSfheCeC IaeOuzmqCryumRTPPskV JCAlkukqytGID JEGjndtWFlWFyoYbYUNYY JNYsjOB JkldymVNTbHmIbGniCoBGOzspu KalUpcZvvbCFIYCrlL KiaWQYuuSYHHyT LSrIHq LYfdtrLPTxBVKkteISWUm MWGNGWJ McgjRHNyPOogpyBYdDPYzsIQY MxlvDhnBlAPZjtlgeKtd NjvoTPmqDrPEXUABhNM NyIrRUUzWWpqvwMLPV OhSykoZko OqvdqWJRwTIFUYXDznqoQN OuXvnRTQQr OvMYipOdPUXdCkzws OvpzKEvLIdbKwHg PhRiOGJPimxM PqtcGEHjRRik QJDpWzH QQGjjFMISSsj RUDtQtmERxgvcUVIdt RdxJnVwvoXPqLpayiyx RgykWytxvwrwle SGPzEOBxTkskEptCHqzHIte SdRdRnKqAOHzB ShRJfN SpXdoShiJMKnXMZQRLoCod TALhteDRIHAoGVDBAmRzZL TNBGNcrxmWvbbtZJVvZJitVrk ToYhuDk USyLHMFTdqFHLuQw UWqlzwAYOhhNmXndjFJVnsXwPd UXaqGIpnPecWqTE WlltjEgpumpOTXCuaAyboQwJ XIqqijQw XpxfbuT YUzCTxdUqaW YucwvuLkfnHdBKVbSfXLBGl ZixRNYXKRekDfmCEYZoxzJ bUsYmprNYOLbGIE byHsisaMofkfyoDOtavNQrO cFcBoHO cQoMbidXbjBBMZd cjjABlZoJTtcvmD coLMrfARjIDNCxu dLDViNcdkqQliqGkidIZRVbJgM djRrAnnSnWinJbWNbd dkgxozstsmRlyGuop ewMBfqDHJ fTaVkagdLEWKEJOVGBjf fdnfYXBsqwTpWEcJBhNEHNTgQW gAyiZWdJHpORUWX gGeztnVsVCWLdNTVTIeloyD gJTUpx giMnkjMiGlCEDpqgOmiZ gylzVwTrSh hYAXzQyeUyJBDytBwxAITqDe iTRNBvmayaTMPvBcvJlXQPGg iULoPlbTSVTwynTFCSVE iXagMbgRuZCVL idOPTJlzrBuIq jpNttOWsoo jrtoSRnBzGBBnRolvQ kKSCBFikJKYCtQj kTQoQBJneyVuifo kaHKYCCiylRLUjbEW khhgxOMtBUBzjzzQXucUmB lqDzMqKtEYtKi mLsJOgFyg maWbEfiRBiAmHKJNVCEiOstByJ myJcLUzQSvByIK nAfsNiOjPSFY nBTSHBjKDbFEVc oJzZQfjAvPqutTezmIhkqrZE oMhSCyPPpNF oRAXmSYHGTnITuVY ofSDLgfNeeHbycQSiNLhLB oygfvoqUPduJzPADTzqR pHzgrLIAoFjM pMgeuEmNxBSpwSKEu qJxKtEtCuHDcffIGTqTqr qRhbeBwGaMjcCGwjAOrtB rBnENDY rGEvBopTURaavSamdDGjxw rYfXDWHai rkaGDDsTAZeFZIGZEIx sKOCvqKAWbIoyHcSW sMmANDkKtKSlz srZxruZWs tYKPgiqDRhpmQY uHNmzqvBHZvth uktFeTZq wcTAWwHxdQYtToyMegRVg weBiLMAFPtJnu xLsuLpLuLBqZVDDxaNCiyhpmw xdJAimscKJa xrQsbpELbFRUm yMHPbbjlNALXIomHFnhRe ybOyXv yeZGhUspKfEn yiwEbzdfNCFvYZsPHxcHBfkz yjNCDn yybFqbyhVPff zHCDbtQQb zOFcvrGXrNOLLvm zfbJOeFbtt zkDheLpUsulhmkWwTYkBEwi znHHHKzQsbiMRY

Name

.text

Size

371KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

108B

Characteristics

Name

.voltbl

Size

512B

Virtual Size

84B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

160KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ