fbf9e18b17727fb02cd1179113621e5a

General

Target
fbf9e18b17727fb02cd1179113621e5a
Size 408KB
Sample220714-hep6asded6
SHA256 9b5e25cf9ccdbe557ba9e0e070ade9d900fed8b1c7a7043c5638d57ee7f4cb9b
MD5 fbf9e18b17727fb02cd1179113621e5a
SHA1 93f053d31baaadacd309d5f87bba76455bf32667
SHA512 2ed01868d7b35632b479ccbacde41d46e0e8107006cc15d52aa80a1dc5f8d057b5cb012c5d042ebff443d976557a0fb45c7037bfd8b35ba838a56f2afb75995e
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVD53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPx5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fbf9e18b17727fb02cd1179113621e5a

.dll 408KB

fbf9e18b17727fb02cd1179113621e5a

IMPHASH 7f17bee5c6b681d4f6afdf362cb13b3c
SHA256 9b5e25cf9ccdbe557ba9e0e070ade9d900fed8b1c7a7043c5638d57ee7f4cb9b
MD5 fbf9e18b17727fb02cd1179113621e5a
SHA1 93f053d31baaadacd309d5f87bba76455bf32667
SHA512 2ed01868d7b35632b479ccbacde41d46e0e8107006cc15d52aa80a1dc5f8d057b5cb012c5d042ebff443d976557a0fb45c7037bfd8b35ba838a56f2afb75995e
SSDEEP 6144:y2yP+O2jQ0rYE9e2T/O2dnZVD53RCmdj+lNps5z7s63Mg0ma54FVGtJyySs+:lyPorYncPx5hCEj+lrs5zyg58JFS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

97024

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSAStartup bind WSASetServiceW WSALookupServiceEnd WSALookupServiceNextW WSALookupServiceBeginW WSAStringToAddressW WSAGetLastError accept socket send recv listen getsockname connect closesocket

kernel32

CreateFileW ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW LoadLibraryExW OutputDebugStringW HeapReAlloc EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName GetLastError HeapAlloc HeapFree GetProcessHeap Sleep VirtualAlloc GetComputerNameW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection WideCharToMultiByte GetLocaleInfoEx MultiByteToWideChar GetStringTypeW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetProcAddress HeapSize IsDebuggerPresent IsValidCodePage GetACP GetOEMCP SetLastError GetFileType InitOnceExecuteOnce GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx

ole32

CoLoadLibrary

Sharing

General

Malware Config

Signatures

File Explorer

fbf9e18b17727fb02cd1179113621e5a

ws2_32

kernel32

ole32