63a46343104c1dd262e67bbb6cef476f

General

Target
63a46343104c1dd262e67bbb6cef476f
Size 323KB
Sample220707-l6sbhsedc9
SHA256 3b36e02fa87fd4649c4161a234ff2b0b07c6f8031be0789c9fbd61e28128e572
MD5 63a46343104c1dd262e67bbb6cef476f
SHA1 67320afddf2108e96fa9dbb12ffa5cbfc1ae5f36
SHA512 0c42d43afac38b517b732f698a053e989cbaa8f91835cb83ef69f03572dd03355c9264273a0900736e665011a71a94540788f22d0f3b7b847797928aab4f7ba8
SSDEEP 6144:APWA/nGhZPFrHhIBfSnkcJdDsf2dLPJViqiVTN1H3946yBPE5Eyi:APfuhZPD/zJOf8KVxZ394tPE5X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

63a46343104c1dd262e67bbb6cef476f

.dll 323KB

63a46343104c1dd262e67bbb6cef476f

IMPHASH 82e76878f3d73e2f9e0fdc5dfcbc7363
SHA256 3b36e02fa87fd4649c4161a234ff2b0b07c6f8031be0789c9fbd61e28128e572
MD5 63a46343104c1dd262e67bbb6cef476f
SHA1 67320afddf2108e96fa9dbb12ffa5cbfc1ae5f36
SHA512 0c42d43afac38b517b732f698a053e989cbaa8f91835cb83ef69f03572dd03355c9264273a0900736e665011a71a94540788f22d0f3b7b847797928aab4f7ba8
SSDEEP 6144:APWA/nGhZPFrHhIBfSnkcJdDsf2dLPJViqiVTN1H3946yBPE5Eyi:APfuhZPD/zJOf8KVxZ394tPE5X
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

66912

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetVersionExA FormatMessageA LocalFree GetCurrentProcess CloseHandle VirtualAlloc GetLastError SetStdHandle FlushFileBuffers HeapReAlloc HeapFree HeapAlloc GetProcAddress GetModuleHandleA ExitProcess ReadConsoleInputA SetConsoleMode GetConsoleMode WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId FlsSetValue GetCommandLineA GetProcessHeap HeapSetInformation HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameA FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlUnwindEx LoadLibraryA InitializeCriticalSection CreateFileA RtlVirtualUnwind RtlLookupFunctionEntry GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW Sleep SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP

user32

MessageBoxA

advapi32

SetSecurityDescriptorOwner LookupAccountNameA IsValidSid CopySid OpenProcessToken GetTokenInformation LsaAddAccountRights LsaStorePrivateData LsaOpenPolicy LsaNtStatusToWinError AddAce GetAce GetAclInformation AddAccessDeniedAce InitializeAcl GetLengthSid AddAccessAllowedAce DeleteAce EqualSid RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA LookupAccountSidA FreeSid SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor AllocateAndInitializeSid GetSecurityDescriptorDacl MakeAbsoluteSD GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSecurityDescriptorLength RegCreateKeyExA MakeSelfRelativeSD LsaFreeMemory LsaClose LsaRetrievePrivateData

ole32

CoTaskMemFree CoTaskMemAlloc CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

63a46343104c1dd262e67bbb6cef476f

kernel32

user32

advapi32

ole32