b36eb0bd46165b147e33fcdcbdb56418

General

Target
b36eb0bd46165b147e33fcdcbdb56418
Size 367KB
Sample220629-b4nv7sffc3
SHA256 e1fdfa6f2fc816c58037deca3da54280932bc3cdbfc881ebf1ff5e2e4995ea95
MD5 b36eb0bd46165b147e33fcdcbdb56418
SHA1 7113004d9405c0863a47ef18539d887d82130593
SHA512 c538b61ff69c302514c85924dd359a45316c85bb29131853c666c555e039ef6bb5d2fa3cb042f9bd6fee9daf8ac62274e36054f5609c551713ca9663fc2ceb15
SSDEEP 6144:wyIjHmtfTQrPqSGXK3lSlOPbuxdDEyfIaib+oUL+uvS7eJwH:wyoHmt7TK3RPM2r6o+Y
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b36eb0bd46165b147e33fcdcbdb56418

.dll 367KB

b36eb0bd46165b147e33fcdcbdb56418

IMPHASH dfe71ea3b85a666eef05134056ae9d05
SHA256 e1fdfa6f2fc816c58037deca3da54280932bc3cdbfc881ebf1ff5e2e4995ea95
MD5 b36eb0bd46165b147e33fcdcbdb56418
SHA1 7113004d9405c0863a47ef18539d887d82130593
SHA512 c538b61ff69c302514c85924dd359a45316c85bb29131853c666c555e039ef6bb5d2fa3cb042f9bd6fee9daf8ac62274e36054f5609c551713ca9663fc2ceb15
SSDEEP 6144:wyIjHmtfTQrPqSGXK3lSlOPbuxdDEyfIaib+oUL+uvS7eJwH:wyoHmt7TK3RPM2r6o+Y
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

17692

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW HeapReAlloc OutputDebugStringW GetCPInfo SetFilePointerEx GetACP IsValidCodePage LoadLibraryExW FreeLibrary FatalAppExitA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale CloseHandle SetStdHandle WriteConsoleW CreateFileW GetOEMCP VirtualAlloc EncodePointer DecodePointer GetLastError HeapFree HeapAlloc GetCommandLineA GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent GetProcessHeap ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW HeapSize RtlUnwindEx EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThread GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW RaiseException

user32

EndPaint DestroyWindow SetGestureConfig TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW BeginPaint TranslateMessage RegisterClassExW LoadStringW ShowWindow CreateWindowExW UpdateWindow DefWindowProcW DispatchMessageW ScreenToClient GetGestureInfo InvalidateRect CloseGestureInfoHandle

gdi32

LineTo DeleteObject SelectObject Polyline CreatePen MoveToEx

Sharing

General

Malware Config

Signatures

File Explorer

b36eb0bd46165b147e33fcdcbdb56418

kernel32

user32

gdi32