33a426af54c8514a4724de407a88f413

General

Target
33a426af54c8514a4724de407a88f413
Size 471KB
Sample220714-gsm3escbf7
SHA256 d8eb9fa1ad785b5b927b316bc0b69932b72fd10b226b4e19c8787e13293ee8ef
MD5 33a426af54c8514a4724de407a88f413
SHA1 f157da1c60d460c218f1a13ed53ea33448479482
SHA512 9e6bdcaf079abc287afa2bf2ef2ed17274a3da3713aba4f6e5c9cb8b2af6694c7e938c0d0870c8a93db33bb7427e8d02e8569608a6aefbc02eef0a42f896bbe0
SSDEEP 12288:i1IP4MEsMgzqVFbkcWPFVPU+gm9sZIpscUqnqvevQz:iCELA0SC+gmmZIpsHOUf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

33a426af54c8514a4724de407a88f413

.dll 471KB

33a426af54c8514a4724de407a88f413

IMPHASH 69b7e3d2975c7dcf89cf49f3940492b8
SHA256 d8eb9fa1ad785b5b927b316bc0b69932b72fd10b226b4e19c8787e13293ee8ef
MD5 33a426af54c8514a4724de407a88f413
SHA1 f157da1c60d460c218f1a13ed53ea33448479482
SHA512 9e6bdcaf079abc287afa2bf2ef2ed17274a3da3713aba4f6e5c9cb8b2af6694c7e938c0d0870c8a93db33bb7427e8d02e8569608a6aefbc02eef0a42f896bbe0
SSDEEP 12288:i1IP4MEsMgzqVFbkcWPFVPU+gm9sZIpscUqnqvevQz:iCELA0SC+gmmZIpsHOUf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

7600

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

VirtualAlloc WriteConsoleW CreateFileW CloseHandle HeapReAlloc HeapSize GetStringTypeW SetFilePointerEx GetFileSizeEx SetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW

user32

EndPaint BeginPaint UpdateWindow PostQuitMessage LoadCursorW GetMessageW DefWindowProcW DestroyWindow CreateWindowExW RegisterClassExW LoadStringW ShowWindow DispatchMessageW TranslateAcceleratorW TranslateMessage

ole32

CoTaskMemAlloc CoCreateInstance CoCreateFreeThreadedMarshaler CoTaskMemFree CoInitialize

Name

.text

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

322KB

Virtual Size

321KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

33a426af54c8514a4724de407a88f413

kernel32

user32

ole32