29459e1d523e8b13f41fec5b264872f2

General

Target
29459e1d523e8b13f41fec5b264872f2
Size 666KB
Sample220714-e6khcagfc6
SHA256 5d7a498eae82b508261afa8a6ab7290d3eff5dd69f3c62195172eebbef90c82a
MD5 29459e1d523e8b13f41fec5b264872f2
SHA1 650775e8d3ab82095b9bc8c55a7498a8138d429c
SHA512 07e60d72b532749a092ae36512051c0da0deca24d091c431d900a71177a1c50425bf5bb04f906ba7bd57492073526a3f5081fbf7f24d469a9b06b8b3143a8d2a
SSDEEP 12288:AbE/HRtNDc4Tl94NTt4B7wU47yYr+H+myDqsQul21kYygdYst3N2Z+Y2tieHNJn4:AbE/HR6qsQ11Lt9OsNJUDXX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

29459e1d523e8b13f41fec5b264872f2

.dll 666KB

29459e1d523e8b13f41fec5b264872f2

IMPHASH 2eca9e124557781b3f760fd6e4322522
SHA256 5d7a498eae82b508261afa8a6ab7290d3eff5dd69f3c62195172eebbef90c82a
MD5 29459e1d523e8b13f41fec5b264872f2
SHA1 650775e8d3ab82095b9bc8c55a7498a8138d429c
SHA512 07e60d72b532749a092ae36512051c0da0deca24d091c431d900a71177a1c50425bf5bb04f906ba7bd57492073526a3f5081fbf7f24d469a9b06b8b3143a8d2a
SSDEEP 12288:AbE/HRtNDc4Tl94NTt4B7wU47yYr+H+myDqsQul21kYygdYst3N2Z+Y2tieHNJn4:AbE/HR6qsQ11Lt9OsNJUDXX
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

212444

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentThread VirtualAlloc SetThreadAffinityMask CreateFileW ReadConsoleW WriteConsoleW SetStdHandle OutputDebugStringW LoadLibraryExW FreeLibrary GetTimeZoneInformation QueryPerformanceFrequency SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle HeapReAlloc GetOEMCP GetACP IsValidCodePage GetModuleFileNameW WriteFile FreeEnvironmentStringsW SetConsoleCtrlHandler QueryPerformanceCounter GetEnvironmentStringsW GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError HeapFree RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId FatalAppExitA GetCPInfo HeapAlloc RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW GetProcAddress CreateSemaphoreW IsProcessorFeaturePresent GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap IsDebuggerPresent GetStdHandle GetFileType GetModuleFileNameA GetCurrentProcessId SetEnvironmentVariableA

user32

GetMessageW SetProcessDPIAware LoadIconW LoadCursorW GetDesktopWindow FillRect InvalidateRect EndPaint BeginPaint UpdateWindow DrawTextW KillTimer SetCoalescableTimer SetTimer ShowWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage

gdi32

GetStockObject

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

29459e1d523e8b13f41fec5b264872f2

kernel32

user32

gdi32

ole32