3f9c1602222e1692029e97ae30d97207

General

Target
3f9c1602222e1692029e97ae30d97207
Size 366KB
Sample220629-b1s1raffb4
SHA256 e0718dbfb9260c6c016a79f2a6b33662e6897c818d9211ac935129b1eac3f1fe
MD5 3f9c1602222e1692029e97ae30d97207
SHA1 fa7ac57a4b11f1a709b342070e2f050987a053c5
SHA512 23b565ac6acdebf3fbfd02fc2a47c9d280542566bf611c4e01fd136ab4d04d620865d60c9f50eb771b28b44293fd762e4ce64d46edb342f859fda3375a341665
SSDEEP 6144:hgnfTUyPXWbm30TFSPkCHaEhTKp73Di9L7XWdzDf7YfTvD0ZiF5slk5fd7bVv:hgnx+W0T8HHhwzWd69f7YfrYQgODv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3f9c1602222e1692029e97ae30d97207

.dll 366KB

3f9c1602222e1692029e97ae30d97207

IMPHASH dfe71ea3b85a666eef05134056ae9d05
SHA256 e0718dbfb9260c6c016a79f2a6b33662e6897c818d9211ac935129b1eac3f1fe
MD5 3f9c1602222e1692029e97ae30d97207
SHA1 fa7ac57a4b11f1a709b342070e2f050987a053c5
SHA512 23b565ac6acdebf3fbfd02fc2a47c9d280542566bf611c4e01fd136ab4d04d620865d60c9f50eb771b28b44293fd762e4ce64d46edb342f859fda3375a341665
SSDEEP 6144:hgnfTUyPXWbm30TFSPkCHaEhTKp73Di9L7XWdzDf7YfTvD0ZiF5slk5fd7bVv:hgnx+W0T8HHhwzWd69f7YfrYQgODv
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17724

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW HeapReAlloc OutputDebugStringW GetCPInfo SetFilePointerEx GetACP IsValidCodePage LoadLibraryExW FreeLibrary FatalAppExitA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale CloseHandle SetStdHandle WriteConsoleW CreateFileW GetOEMCP VirtualAlloc EncodePointer DecodePointer GetLastError HeapFree HeapAlloc GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetProcessHeap ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW HeapSize RtlUnwindEx EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThread GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW RaiseException

user32

EndPaint DestroyWindow SetGestureConfig TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW BeginPaint TranslateMessage RegisterClassExW LoadStringW ShowWindow CreateWindowExW UpdateWindow DefWindowProcW DispatchMessageW ScreenToClient GetGestureInfo InvalidateRect CloseGestureInfoHandle

gdi32

LineTo DeleteObject SelectObject Polyline CreatePen MoveToEx

Sharing

General

Malware Config

Signatures

File Explorer

3f9c1602222e1692029e97ae30d97207

kernel32

user32

gdi32