ccffdd642c029fa1ad9282e8ef74f1d3

Sharing

Copy URL Twitter E-mail

General

Target
ccffdd642c029fa1ad9282e8ef74f1d3
Size 678KB
Sample220628-tdcdlaccg5
SHA256 09b8a7ed65732b83d7b7f86c8287d2ccfb94f85fa5a65238d88aa4042bc6a737
MD5 ccffdd642c029fa1ad9282e8ef74f1d3
SHA1 55dabe445a24e6a409a7f7da1c3a86fa9a12b0fa
SHA512 ed157cfa96910aea765dee44abe86ad5c2b349d3b35c4d390857785b30fc253560b337b60cbf69406aad31b13bd2e714eb8afdeadd1d4790a63f8d5eaa7b007c
SSDEEP 12288:e6B62yPpoXgO82uPhpzL0jpqHKX4XWTP7IOvyOZDnSujSmA0jg3stASh:e6BnIWyOBdAeg3JK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ccffdd642c029fa1ad9282e8ef74f1d3

.dll 678KB

ccffdd642c029fa1ad9282e8ef74f1d3

IMPHASH 97b3967e1bc8c38f6526403487e2cc51
SHA256 09b8a7ed65732b83d7b7f86c8287d2ccfb94f85fa5a65238d88aa4042bc6a737
MD5 ccffdd642c029fa1ad9282e8ef74f1d3
SHA1 55dabe445a24e6a409a7f7da1c3a86fa9a12b0fa
SHA512 ed157cfa96910aea765dee44abe86ad5c2b349d3b35c4d390857785b30fc253560b337b60cbf69406aad31b13bd2e714eb8afdeadd1d4790a63f8d5eaa7b007c
SSDEEP 12288:e6B62yPpoXgO82uPhpzL0jpqHKX4XWTP7IOvyOZDnSujSmA0jg3stASh:e6BnIWyOBdAeg3JK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17092

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

CreatePen DeleteObject LineTo MoveToEx Polyline SelectObject

ole32

CoCreateInstance CoInitialize CoUninitialize

user32

BeginPaint CloseTouchInputHandle CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EndPaint GetMessageW GetTouchInputInfo InvalidateRect LoadCursorW LoadStringW MessageBoxW PostQuitMessage RegisterClassExW RegisterTouchWindow ShowWindow TranslateAcceleratorW TranslateMessage UnregisterTouchWindow UpdateWindow

kernel32

CloseHandle CompareStringW CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeFormatW GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc WideCharToMultiByte WriteConsoleW WriteFile

AgbPjIIpVgqthphoEDil BKSGZWoCdRRZ BZTksnRcUlhonwlz CjrsBMiBmkicdr CmPdXZgONRdo CqWBHGttYonxcMgEXtWmEV CqfdBAbUzJuk DllRegisterServer DnfTgZW DvCoyekegkndrsDH EKOwocbcIwdLHiNkmUrCl Efftvk FcnNOfBdAbvwh FhWBdzcrvdqNZpMbhTZIQreGg HDMQleZswu Hdeeaz HntGFSDqFuaXKvmdzc INyldipDCcKlVrKC IPLOzdLHDnJsRZZSfheCeC IaeOuzmqCryumRTPPskV JCAlkukqytGID JEGjndtWFlWFyoYbYUNYY JNYsjOB JkldymVNTbHmIbGniCoBGOzspu KalUpcZvvbCFIYCrlL KiaWQYuuSYHHyT LSrIHq LYfdtrLPTxBVKkteISWUm MWGNGWJ McgjRHNyPOogpyBYdDPYzsIQY MxlvDhnBlAPZjtlgeKtd NjvoTPmqDrPEXUABhNM NyIrRUUzWWpqvwMLPV OhSykoZko OqvdqWJRwTIFUYXDznqoQN OuXvnRTQQr OvMYipOdPUXdCkzws OvpzKEvLIdbKwHg PhRiOGJPimxM PqtcGEHjRRik QJDpWzH QQGjjFMISSsj RUDtQtmERxgvcUVIdt RdxJnVwvoXPqLpayiyx RgykWytxvwrwle SGPzEOBxTkskEptCHqzHIte SdRdRnKqAOHzB ShRJfN SpXdoShiJMKnXMZQRLoCod TALhteDRIHAoGVDBAmRzZL TNBGNcrxmWvbbtZJVvZJitVrk ToYhuDk USyLHMFTdqFHLuQw UWqlzwAYOhhNmXndjFJVnsXwPd UXaqGIpnPecWqTE WlltjEgpumpOTXCuaAyboQwJ XIqqijQw XpxfbuT YUzCTxdUqaW YucwvuLkfnHdBKVbSfXLBGl ZixRNYXKRekDfmCEYZoxzJ bUsYmprNYOLbGIE byHsisaMofkfyoDOtavNQrO cFcBoHO cQoMbidXbjBBMZd cjjABlZoJTtcvmD coLMrfARjIDNCxu dLDViNcdkqQliqGkidIZRVbJgM djRrAnnSnWinJbWNbd dkgxozstsmRlyGuop ewMBfqDHJ fTaVkagdLEWKEJOVGBjf fdnfYXBsqwTpWEcJBhNEHNTgQW gAyiZWdJHpORUWX gGeztnVsVCWLdNTVTIeloyD gJTUpx giMnkjMiGlCEDpqgOmiZ gylzVwTrSh hYAXzQyeUyJBDytBwxAITqDe iTRNBvmayaTMPvBcvJlXQPGg iULoPlbTSVTwynTFCSVE iXagMbgRuZCVL idOPTJlzrBuIq jpNttOWsoo jrtoSRnBzGBBnRolvQ kKSCBFikJKYCtQj kTQoQBJneyVuifo kaHKYCCiylRLUjbEW khhgxOMtBUBzjzzQXucUmB lqDzMqKtEYtKi mLsJOgFyg maWbEfiRBiAmHKJNVCEiOstByJ myJcLUzQSvByIK nAfsNiOjPSFY nBTSHBjKDbFEVc oJzZQfjAvPqutTezmIhkqrZE oMhSCyPPpNF oRAXmSYHGTnITuVY ofSDLgfNeeHbycQSiNLhLB oygfvoqUPduJzPADTzqR pHzgrLIAoFjM pMgeuEmNxBSpwSKEu qJxKtEtCuHDcffIGTqTqr qRhbeBwGaMjcCGwjAOrtB rBnENDY rGEvBopTURaavSamdDGjxw rYfXDWHai rkaGDDsTAZeFZIGZEIx sKOCvqKAWbIoyHcSW sMmANDkKtKSlz srZxruZWs tYKPgiqDRhpmQY uHNmzqvBHZvth uktFeTZq wcTAWwHxdQYtToyMegRVg weBiLMAFPtJnu xLsuLpLuLBqZVDDxaNCiyhpmw xdJAimscKJa xrQsbpELbFRUm yMHPbbjlNALXIomHFnhRe ybOyXv yeZGhUspKfEn yiwEbzdfNCFvYZsPHxcHBfkz yjNCDn yybFqbyhVPff zHCDbtQQb zOFcvrGXrNOLLvm zfbJOeFbtt zkDheLpUsulhmkWwTYkBEwi znHHHKzQsbiMRY

Name

.text

Size

371KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

108B

Characteristics

Name

.voltbl

Size

512B

Virtual Size

84B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ