0eb7a159000111de3d260f41a4ef0c91

Sharing

Copy URL Twitter E-mail

General

Target
0eb7a159000111de3d260f41a4ef0c91
Size 658KB
Sample220714-hj7adaaghp
SHA256 f0ca56633bf5a78485a3e81f7e03fcb27e7f44fa44f078a9d743211fdd627496
MD5 0eb7a159000111de3d260f41a4ef0c91
SHA1 18af0a8bfc8fd6f83c117123fb8a372abe6a616f
SHA512 dac48cb06b72890e3e9254b3b2c8a010e5b4cf21e72c9b59c8febd7876181c366b69bd8faf888a93260713ab16b171f4cfccc7a4e33ac994d684ccc1ceb3ab3c
SSDEEP 12288:V4wcc2MydZgRd9aa8l85Qr0t6DZ32QcbplMyVJqhVgyXBaZe+yEltg/BQ4LJlnfp:V4wcc2WRd9aaKDhAkyVJ4VaZAnJln1kI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0eb7a159000111de3d260f41a4ef0c91

.dll 658KB

0eb7a159000111de3d260f41a4ef0c91

IMPHASH a0c379f4f455b8c0a2e7c4a2ef3e3d44
SHA256 f0ca56633bf5a78485a3e81f7e03fcb27e7f44fa44f078a9d743211fdd627496
MD5 0eb7a159000111de3d260f41a4ef0c91
SHA1 18af0a8bfc8fd6f83c117123fb8a372abe6a616f
SHA512 dac48cb06b72890e3e9254b3b2c8a010e5b4cf21e72c9b59c8febd7876181c366b69bd8faf888a93260713ab16b171f4cfccc7a4e33ac994d684ccc1ceb3ab3c
SSDEEP 12288:V4wcc2MydZgRd9aa8l85Qr0t6DZ32QcbplMyVJqhVgyXBaZe+yEltg/BQ4LJlnfp:V4wcc2WRd9aaKDhAkyVJ4VaZAnJln1kI
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

4800

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateDirectoryA CreateFileA CreateFileW DeleteFileA EnterCriticalSection ExitProcess FreeEnvironmentStringsA GetACP GetCPInfo GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetEnvironmentStrings GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemInfo GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetVersion HeapAlloc HeapFree IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFileTimeToFileTime MultiByteToWideChar RaiseException ReadFile RemoveDirectoryA RemoveVectoredExceptionHandler RtlCaptureContext SetConsoleCtrlHandler SetEndOfFile SetFilePointer SetFileTime SetHandleCount SetLastError SetThreadLocale SystemTimeToFileTime TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualAlloc VirtualFree VirtualQuery WideCharToMultiByte WriteFile RtlRestoreContext RtlUnwindEx

user32

EnumThreadWindows MessageBoxA ShowWindow wsprintfA

Name

.text

Size

298KB

Virtual Size

298KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

55KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

308B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ