a7baee2234bdc173441b364cdc6c4d3f

Sharing

Copy URL Twitter E-mail

General

Target
a7baee2234bdc173441b364cdc6c4d3f
Size 510KB
Sample220714-jfza2affd4
SHA256 a97a86507df6c5e4e21350ae907aef2bfff3758ce03cf0986ffa9d4d1d731ab5
MD5 a7baee2234bdc173441b364cdc6c4d3f
SHA1 625905269df0e5e027bd6baca5fa6250b0e68e68
SHA512 9afe021b9f7a5e9f29a6508abc422cdb76e2566ef05758347b012f90f19348b9b2d41fbfe96a8d706ca54e18d0c383a9e6cac0773c14db4891bae52b2f1e663e
SSDEEP 12288:9OT6sIypRSjjSlCBQCRbpNdUzJwxDD2+UkoX8LlGf:9OT6zypRSf0HCRbyKVD2+UkoX8hGf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a7baee2234bdc173441b364cdc6c4d3f

.dll 510KB

a7baee2234bdc173441b364cdc6c4d3f

IMPHASH 17a9db8a367c83d15112ca6763718dff
SHA256 a97a86507df6c5e4e21350ae907aef2bfff3758ce03cf0986ffa9d4d1d731ab5
MD5 a7baee2234bdc173441b364cdc6c4d3f
SHA1 625905269df0e5e027bd6baca5fa6250b0e68e68
SHA512 9afe021b9f7a5e9f29a6508abc422cdb76e2566ef05758347b012f90f19348b9b2d41fbfe96a8d706ca54e18d0c383a9e6cac0773c14db4891bae52b2f1e663e
SSDEEP 12288:9OT6sIypRSjjSlCBQCRbpNdUzJwxDD2+UkoX8LlGf:9OT6zypRSf0HCRbyKVD2+UkoX8hGf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

4512

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateDirectoryA CreateFileA CreateFileW DeleteFileA EnterCriticalSection ExitProcess FreeEnvironmentStringsA GetACP GetCPInfo GetCurrentProcessId GetCurrentThreadId GetEnvironmentStrings GetFileAttributesA GetFileAttributesW GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetSystemInfo GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetVersion HeapAlloc HeapFree IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFileTimeToFileTime MultiByteToWideChar RaiseException ReadFile RemoveDirectoryA RemoveVectoredExceptionHandler RtlCaptureContext SetConsoleCtrlHandler SetEndOfFile SetFilePointer SetFileTime SetHandleCount SetLastError SetThreadLocale SystemTimeToFileTime TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualAlloc VirtualFree VirtualQuery WideCharToMultiByte WriteFile RtlRestoreContext RtlUnwindEx

user32

EnumThreadWindows MessageBoxA wsprintfA

Name

.text

Size

189KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

40KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

285B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ