a1a8ea155be9a6b5ffe34914f4b6e809

Sharing

Copy URL Twitter E-mail

General

Target
a1a8ea155be9a6b5ffe34914f4b6e809
Size 837KB
Sample220708-blm6ysbgdj
SHA256 1fc8f34232e14cf556e7acee3f9dde1d6ab5cd28ad1e0da0e24918a95fc5c669
MD5 a1a8ea155be9a6b5ffe34914f4b6e809
SHA1 5d754442f015468d197ddec3fe9d3e9806f2d7c7
SHA512 cf67a22d0793844d6f55f56a23ae6c29dc1f98d12583fbb2b9e2b1a0a9649298559e90143cca02bb72c8adca9ee31857c36f6de76d4892d0c22d67e33236edca
SSDEEP 6144:O8q+c2lEiKXfsCeMi1UTETLiCoEEk4bxNiLEUP9nw0HTqU1FzKYMjHjiZQ3hO5DG:O6EiGkCe11vAkyxNxKTMjHj3Apoplz6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a1a8ea155be9a6b5ffe34914f4b6e809

.dll 837KB

a1a8ea155be9a6b5ffe34914f4b6e809

IMPHASH 8a0aaaeebe095792d027fa76e7ace06e
SHA256 1fc8f34232e14cf556e7acee3f9dde1d6ab5cd28ad1e0da0e24918a95fc5c669
MD5 a1a8ea155be9a6b5ffe34914f4b6e809
SHA1 5d754442f015468d197ddec3fe9d3e9806f2d7c7
SHA512 cf67a22d0793844d6f55f56a23ae6c29dc1f98d12583fbb2b9e2b1a0a9649298559e90143cca02bb72c8adca9ee31857c36f6de76d4892d0c22d67e33236edca
SSDEEP 6144:O8q+c2lEiKXfsCeMi1UTETLiCoEEk4bxNiLEUP9nw0HTqU1FzKYMjHjiZQ3hO5DG:O6EiGkCe11vAkyxNxKTMjHj3Apoplz6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

267056

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rpcrt4

UuidFromStringW RpcStringFreeW UuidToStringW

kernel32

LoadResource LockResource SizeofResource GlobalAlloc GlobalLock GlobalUnlock lstrcmpiW FindResourceW ReadConsoleW ReadFile SetEndOfFile WriteConsoleW FlushFileBuffers SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName CompareStringEx GetDateFormatEx GetTimeFormatEx GetLocaleInfoEx GetStringTypeW LoadLibraryW OutputDebugStringW SetConsoleCtrlHandler FatalAppExitA WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount64 GetSystemTimeAsFileTime GetModuleFileNameA LoadLibraryExW GetFileType GetStartupInfoW TerminateProcess FlsFree FlsSetValue FlsGetValue FlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext GetCPInfo GetOEMCP GetACP IsValidCodePage HeapReAlloc GetStdHandle GetCurrentThread Sleep HeapSize AreFileApisANSI GetModuleHandleExW ExitProcess GetCommandLineA IsProcessorFeaturePresent IsDebuggerPresent VirtualQuery VirtualProtect GetSystemInfo SetThreadStackGuarantee RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader InitializeCriticalSectionEx VirtualFree InterlockedPushEntrySList GetProcAddress GetModuleHandleW GetModuleFileNameW FreeLibrary DisableThreadLibraryCalls VirtualAlloc DeleteCriticalSection InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer MultiByteToWideChar lstrlenW MulDiv FlushInstructionCache InitializeSListHead GetCurrentThreadId GetCurrentProcess LeaveCriticalSection EnterCriticalSection QueryPerformanceFrequency SetLastError GetLastError RaiseException CloseHandle WriteFile CreateFileW QueryPerformanceCounter GetProcessHeap HeapFree HeapAlloc InitOnceExecuteOnce InterlockedPopEntrySList

user32

DefWindowProcW CallWindowProcW RegisterClassExW GetClassInfoExW SendMessageW IsWindow DestroyWindow DialogBoxParamW GetActiveWindow wsprintfW CreateWindowExW SetFocus EnableWindow IsDlgButtonChecked CheckDlgButton EndDialog GetWindowTextLengthW GetWindowTextW SetDlgItemTextW SetDlgItemInt GetDlgItem WinHelpW IsDialogMessageW GetParent PtInRect EqualRect OffsetRect UnionRect IntersectRect MessageBoxA GetClientRect SetWindowRgn EndPaint BeginPaint GetKeyState GetFocus UnregisterClassW CharNextW GetDialogBaseUnits SendDlgItemMessageW GetDlgItemInt CreateDialogParamW SetWindowPos MoveWindow ShowWindow IsChild LoadIconW LoadCursorW SetWindowLongPtrW GetWindowLongPtrW ClientToScreen SetCursor MessageBoxW GetWindowRect InvalidateRect ReleaseDC GetDC TrackPopupMenu RemoveMenu ModifyMenuW InsertMenuW GetSubMenu CheckMenuItem GetMenuStringW LoadMenuW

gdi32

SetWindowOrgEx TextOutW GetTextMetricsW SetTextAlign SelectObject SaveDC RestoreDC GetTextExtentPointW DeleteMetaFile CreateRectRgnIndirect CreateMetaFileW CloseMetaFile GetDeviceCaps DeleteObject CreateFontIndirectW SetWindowExtEx

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW RegOpenKeyW RegSetValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCloseKey LookupAccountSidW

shell32

ShellExecuteW ShellAboutW

ole32

CoTaskMemFree CoCreateInstance StringFromGUID2 CoTaskMemAlloc CoTaskMemRealloc CoInitialize CreateDataAdviseHolder CreateOleAdviseHolder OleRegGetUserType OleRegGetMiscStatus OleRegEnumVerbs

oleaut32

OleCreatePropertyFrame SysStringByteLen VariantClear VariantInit UnRegisterTypeLi LoadRegTypeLi LoadTypeLi VarUI4FromStr VariantChangeType SysAllocStringByteLen VarBstrCat SysStringLen SysAllocStringLen SysAllocString SysFreeString

Name

.text

Size

437KB

Virtual Size

437KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

159KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

181KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ