matanbuchus | matanbuchus_loader_unpacked[.]dll

General

Target
matanbuchus_loader_unpacked.dll
Size 471KB
Sample220713-snxa3sgadp
SHA256 1d54fedc209ca132cb953f7fde263b65c7917e4e7e9fde6c4ef128aa04543a09
MD5 795df1d16417f62c9868b9980a7c7a98
SHA1 655151885663229ea809fecfa8e1ecefb60ff3ad
SHA512 de3235acb8908363c3606c34cf237aa9394f8914bcd3f885442a4a7e2afb4ab94e742257fb179c972899cdefc064d814b213fa0eb266f1c8a98dc70896b5393f
SSDEEP 12288:BnfYouzOEzzQtfa22hr4TYvY5hAJ1Tw8ROUGWoa:BnQ7zAt+h0TYvY5eNRO7Woa
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

matanbuchus

Malware Config

Signatures

Matanbuchus family
matanbuchus

File Explorer

matanbuchus_loader_unpacked.dll

.dll 471KB

matanbuchus_loader_unpacked.dll

IMPHASH 88f6ff83869aa8561e083192e2605bcc
SHA256 1d54fedc209ca132cb953f7fde263b65c7917e4e7e9fde6c4ef128aa04543a09
MD5 795df1d16417f62c9868b9980a7c7a98
SHA1 655151885663229ea809fecfa8e1ecefb60ff3ad
SHA512 de3235acb8908363c3606c34cf237aa9394f8914bcd3f885442a4a7e2afb4ab94e742257fb179c972899cdefc064d814b213fa0eb266f1c8a98dc70896b5393f
SSDEEP 12288:BnfYouzOEzzQtfa22hr4TYvY5hAJ1Tw8ROUGWoa:BnQ7zAt+h0TYvY5eNRO7Woa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

317049

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap RaiseException DeleteCriticalSection ExitProcess VirtualAlloc CreateFileW DecodePointer InitializeCriticalSectionEx OutputDebugStringA CloseHandle GetStringTypeW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess OutputDebugStringW EnterCriticalSection LeaveCriticalSection RtlUnwind InterlockedFlushSList SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetModuleHandleExW GetModuleFileNameW LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW

gdi32

BitBlt RectVisible

shell32

DragQueryFileW

ole32

CoUninitialize

wininet

InternetCloseHandle

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Resubmissions

Sharing