f0dc7c971b305dfd1f5364fb9e6f68d0

General

Target
f0dc7c971b305dfd1f5364fb9e6f68d0
Size 786KB
Sample220708-dblaqagde8
SHA256 44f2819aae2adcae3f9bbb42d60547e1bbcb1131e2eae49c788bece6c9b17629
MD5 f0dc7c971b305dfd1f5364fb9e6f68d0
SHA1 36c2b256794a3787580c30f9d4e2487ebdcc8d25
SHA512 f5b24cfa53b3b400a39abdedbba1930d577d670a9d7c1e1410913fbd8b740c164508dea82606519b88a087d527d4f8e02c224908f7ad51e6db1cb8ace8ba0070
SSDEEP 12288:bALDBmhagVyZtnJ4D4bzv4MN54IG4w4BGFh+y+gVxD1ZTIAJ60YcYCYVEt+eWmE7:kLDMhagstUZnJTVSREVIAzgG69
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f0dc7c971b305dfd1f5364fb9e6f68d0

.dll 786KB

f0dc7c971b305dfd1f5364fb9e6f68d0

IMPHASH 670c629874066cc7173cf833f064f3d2
SHA256 44f2819aae2adcae3f9bbb42d60547e1bbcb1131e2eae49c788bece6c9b17629
MD5 f0dc7c971b305dfd1f5364fb9e6f68d0
SHA1 36c2b256794a3787580c30f9d4e2487ebdcc8d25
SHA512 f5b24cfa53b3b400a39abdedbba1930d577d670a9d7c1e1410913fbd8b740c164508dea82606519b88a087d527d4f8e02c224908f7ad51e6db1cb8ace8ba0070
SSDEEP 12288:bALDBmhagVyZtnJ4D4bzv4MN54IG4w4BGFh+y+gVxD1ZTIAJ60YcYCYVEt+eWmE7:kLDMhagstUZnJTVSREVIAzgG69
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

90132

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTimeZoneInformation ReadConsoleW FormatMessageA LocalFree GetVersionExA GetCurrentProcess CloseHandle VirtualAlloc GetLastError ReadFile SetStdHandle HeapFree HeapAlloc EncodePointer DecodePointer ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetConsoleMode GetNumberOfConsoleInputEvents PeekConsoleInputA ReadConsoleInputA SetConsoleMode RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId GetProcessHeap GetStdHandle WriteFile GetModuleFileNameW IsDebuggerPresent IsProcessorFeaturePresent HeapSize EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FatalAppExitA RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo CreateFileW GetCurrentThread GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetStringTypeW GetConsoleCP SetFilePointerEx WriteConsoleW FlushFileBuffers SetEnvironmentVariableA

user32

MessageBoxA

advapi32

FreeSid LookupAccountNameA IsValidSid GetTokenInformation CopySid OpenProcessToken LsaNtStatusToWinError LsaRetrievePrivateData LsaStorePrivateData LsaAddAccountRights AddAccessAllowedAce AddAccessDeniedAce AddAce DeleteAce EqualSid GetAce GetAclInformation GetLengthSid InitializeAcl RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA LookupAccountSidA RegQueryValueExA AllocateAndInitializeSid GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorLength GetSecurityDescriptorOwner GetSecurityDescriptorSacl InitializeSecurityDescriptor MakeAbsoluteSD MakeSelfRelativeSD SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner RegCreateKeyExA LsaFreeMemory LsaClose LsaOpenPolicy

ole32

CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

f0dc7c971b305dfd1f5364fb9e6f68d0

kernel32

user32

advapi32

ole32