a4e637a6b6ac26fb2f292a3968e4643f

General

Target
a4e637a6b6ac26fb2f292a3968e4643f
Size 348KB
Sample220709-az7l3sdda2
SHA256 9ca9ac1c7bc09ee9e497e47cf54295625b00a3b74e2a1e3bea0b4034f401de10
MD5 a4e637a6b6ac26fb2f292a3968e4643f
SHA1 840e6955d628347784880cd25a277828b0626ab8
SHA512 fbd56f05b352a376f7b542b3e203e685013b5ddae0c36a6d27e5d28fa5488f92bdb007bfe0ceb432febb3530cede5e8b35257e4dd31596aaeb5fe5e286cf1bf3
SSDEEP 6144:PDc1v2qwkkSY9ctMTGg2Y4lK9F0RsfKUJqFfUu3Yh5eLn92+eXElPhBtlSw:PDglrY4gYs0foe7AElP9s
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a4e637a6b6ac26fb2f292a3968e4643f

.dll 348KB

a4e637a6b6ac26fb2f292a3968e4643f

IMPHASH 355388815c4c74c01abe63e4cc515b68
SHA256 9ca9ac1c7bc09ee9e497e47cf54295625b00a3b74e2a1e3bea0b4034f401de10
MD5 a4e637a6b6ac26fb2f292a3968e4643f
SHA1 840e6955d628347784880cd25a277828b0626ab8
SHA512 fbd56f05b352a376f7b542b3e203e685013b5ddae0c36a6d27e5d28fa5488f92bdb007bfe0ceb432febb3530cede5e8b35257e4dd31596aaeb5fe5e286cf1bf3
SSDEEP 6144:PDc1v2qwkkSY9ctMTGg2Y4lK9F0RsfKUJqFfUu3Yh5eLn92+eXElPhBtlSw:PDglrY4gYs0foe7AElP9s
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

66488

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

HeapReAlloc FlushFileBuffers GetVersionExA FormatMessageA LocalFree GetCurrentProcess CloseHandle VirtualAlloc GetLastError IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer ReadConsoleInputA SetConsoleMode GetConsoleMode PeekConsoleInputA GetNumberOfConsoleInputEvents WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation GetVersion HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameW EncodePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetLocaleInfoW FlsGetValue FlsFree SetLastError GetCurrentThread FlsAlloc RtlUnwindEx CreateFileW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW Sleep SetHandleCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WriteConsoleW GetStringTypeW SetFilePointer GetConsoleCP SetStdHandle

user32

MessageBoxA

advapi32

SetSecurityDescriptorOwner LookupAccountNameA IsValidSid CopySid OpenProcessToken GetTokenInformation LsaAddAccountRights LsaStorePrivateData LsaOpenPolicy LsaNtStatusToWinError AddAce GetAce GetAclInformation AddAccessDeniedAce InitializeAcl GetLengthSid AddAccessAllowedAce DeleteAce EqualSid RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA LookupAccountSidA FreeSid SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor AllocateAndInitializeSid GetSecurityDescriptorDacl MakeAbsoluteSD GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSecurityDescriptorLength RegCreateKeyExA MakeSelfRelativeSD LsaFreeMemory LsaClose LsaRetrievePrivateData

ole32

CoTaskMemFree CoTaskMemAlloc CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

a4e637a6b6ac26fb2f292a3968e4643f

kernel32

user32

advapi32

ole32