e5beff87bdb6f719314e99de1ec6727c

General

Target
e5beff87bdb6f719314e99de1ec6727c
Size 348KB
Sample220707-xyr7bsade7
SHA256 0da903a300c1d97c765918cb0ba5aec0bb0da2c1b33876dacf1981da1e9fb81a
MD5 e5beff87bdb6f719314e99de1ec6727c
SHA1 f91215e0d4ca81dae330f5a0c1fbd89cf37f91ab
SHA512 2a73fad772f7b18a4ac329709dda58fa9113847048b9a9d78b1d9714b7502cc74658a6f56f351ca3cce0faa70ca2214c42bb842b6d111fc880c3b1a9c25b7bc7
SSDEEP 6144:PDc1v2qwkkSY9ctMTGg2Y4lK9O0RsfKUJqFfUu3Yh5eLn92+eXElPhBtlSw:PDglrY4g7s0foe7AElP9s
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e5beff87bdb6f719314e99de1ec6727c

.dll 348KB

e5beff87bdb6f719314e99de1ec6727c

IMPHASH 355388815c4c74c01abe63e4cc515b68
SHA256 0da903a300c1d97c765918cb0ba5aec0bb0da2c1b33876dacf1981da1e9fb81a
MD5 e5beff87bdb6f719314e99de1ec6727c
SHA1 f91215e0d4ca81dae330f5a0c1fbd89cf37f91ab
SHA512 2a73fad772f7b18a4ac329709dda58fa9113847048b9a9d78b1d9714b7502cc74658a6f56f351ca3cce0faa70ca2214c42bb842b6d111fc880c3b1a9c25b7bc7
SSDEEP 6144:PDc1v2qwkkSY9ctMTGg2Y4lK9O0RsfKUJqFfUu3Yh5eLn92+eXElPhBtlSw:PDglrY4g7s0foe7AElP9s
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

66488

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

HeapReAlloc FlushFileBuffers GetVersionExA FormatMessageA LocalFree GetCurrentProcess CloseHandle VirtualAlloc GetLastError IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer ReadConsoleInputA SetConsoleMode GetConsoleMode PeekConsoleInputA GetNumberOfConsoleInputEvents WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation GetVersion HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameW EncodePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetLocaleInfoW FlsGetValue FlsFree SetLastError GetCurrentThread FlsAlloc RtlUnwindEx CreateFileW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW Sleep SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WriteConsoleW GetStringTypeW SetFilePointer GetConsoleCP SetStdHandle

user32

MessageBoxA

advapi32

SetSecurityDescriptorOwner LookupAccountNameA IsValidSid CopySid OpenProcessToken GetTokenInformation LsaAddAccountRights LsaStorePrivateData LsaOpenPolicy LsaNtStatusToWinError AddAce GetAce GetAclInformation AddAccessDeniedAce InitializeAcl GetLengthSid AddAccessAllowedAce DeleteAce EqualSid RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA LookupAccountSidA FreeSid SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor AllocateAndInitializeSid GetSecurityDescriptorDacl MakeAbsoluteSD GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSecurityDescriptorLength RegCreateKeyExA MakeSelfRelativeSD LsaFreeMemory LsaClose LsaRetrievePrivateData

ole32

CoTaskMemFree CoTaskMemAlloc CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

e5beff87bdb6f719314e99de1ec6727c

kernel32

user32

advapi32

ole32