e0f0bdb79dadd796da96ba9b6973b8d51bd5b2fffeaef140eb4670a5dd9e7e15

Sharing

Copy URL Twitter E-mail

General

Target
e0f0bdb79dadd796da96ba9b6973b8d51bd5b2fffeaef140eb4670a5dd9e7e15
Size 534KB
Sample221104-k6ak2afhcj
SHA256 e0f0bdb79dadd796da96ba9b6973b8d51bd5b2fffeaef140eb4670a5dd9e7e15
MD5 caaac865b47e75fa94bb8759ee0608c1
SHA1 95405d03883ba62b623d1ad3c074ca9f13d6035b
SHA512 e9d3b77802aeced5169386e76d81bcfbe8beb10037c234ff50de0749d6b8cdfe17da9c9f9f355e0f462ad2109c10b93becc0e3869d22ce003c195f96a5bf5dba
SSDEEP 6144:vTKqTS2X5Bc1p7PIvaf66pPfTISFikbOM5pxHFz3SJnzo+28tz3+TThF4Sr:vucOk6pPAkbnj3zazwk3+vh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e0f0bdb79dadd796da96ba9b6973b8d51bd5b2fffeaef140eb4670a5dd9e7e15

.dll 534KB

e0f0bdb79dadd796da96ba9b6973b8d51bd5b2fffeaef140eb4670a5dd9e7e15

IMPHASH dd552575e0cf9d6f021ffe8e0937be8a
SHA256 e0f0bdb79dadd796da96ba9b6973b8d51bd5b2fffeaef140eb4670a5dd9e7e15
MD5 caaac865b47e75fa94bb8759ee0608c1
SHA1 95405d03883ba62b623d1ad3c074ca9f13d6035b
SHA512 e9d3b77802aeced5169386e76d81bcfbe8beb10037c234ff50de0749d6b8cdfe17da9c9f9f355e0f462ad2109c10b93becc0e3869d22ce003c195f96a5bf5dba
SSDEEP 6144:vTKqTS2X5Bc1p7PIvaf66pPfTISFikbOM5pxHFz3SJnzo+28tz3+TThF4Sr:vucOk6pPAkbnj3zazwk3+vh
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

24616

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdiplus

GdipCreateSolidFill GdipDisposeImage GdipDrawImageI GdipDrawLineI GdipDeletePen GdipCreatePen1 GdipDrawString GdipDeleteFont GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipFillRectangleI GdipFree GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushFromRectI GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipGetVisibleClipBoundsI GdipDeleteGraphics GdipCreateFromHDC GdiplusStartup GdipCloneImage GdipAlloc

crypt32

CryptStringToBinaryA

kernel32

LCMapStringW HeapSize GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStartupInfoW GetFileType SetHandleCount GetConsoleMode GetConsoleCP MultiByteToWideChar HeapDestroy SetFilePointer CreateThread GetCommandLineW GetVersionExA CreateToolhelp32Snapshot GetLastError GetCurrentProcessId Process32First Process32Next CloseHandle VirtualAlloc CreateMutexA WaitForSingleObject ReleaseMutex SetThreadExecutionState DeviceIoControl FormatMessageW Sleep CreateFileW GetFileInformationByHandle FlushFileBuffers GetSystemTime FindFirstFileW FindNextFileW FindClose GetSystemTimeAsFileTime GetFileAttributesExW GetCurrentProcess GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetDiskFreeSpaceExW GetDriveTypeW GetVolumeInformationW FindFirstVolumeMountPointW FindNextVolumeMountPointW FindVolumeMountPointClose GetLogicalDriveStringsW GetModuleFileNameW GetShortPathNameW GetLongPathNameW DosDateTimeToFileTime LocalFileTimeToFileTime ReadFile GetStdHandle WriteFile RtlUnwindEx HeapSetInformation LoadLibraryW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetStringTypeW FlsAlloc SetLastError FlsFree SetStdHandle WriteConsoleW SetEndOfFile GetProcessHeap CompareStringW SystemTimeToFileTime SetEnvironmentVariableA FlsGetValue IsValidCodePage HeapCreate GetVersion GetProcAddress GetModuleHandleW ExitProcess DecodePointer HeapAlloc GetTimeZoneInformation HeapFree HeapReAlloc DeleteFileW GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer WideCharToMultiByte GetCPInfo GetACP GetOEMCP

user32

DefWindowProcA EndPaint BeginPaint InvalidateRect PostQuitMessage DispatchMessageA TranslateMessage GetMessageA SetTimer UpdateWindow CreateWindowExW MessageBoxW RegisterClassExA LoadIconA LoadCursorA ShowWindow LoadStringA

gdi32

GetStockObject

advapi32

RegQueryValueExW RegCreateKeyExW AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey

shell32

CommandLineToArgvW

ole32

CoLoadLibrary