1079023f564789078dfd4cbbf7a4f60f[.]dll[.]exe

General

Target
1079023f564789078dfd4cbbf7a4f60f.dll.exe
Size 413KB
Sample221113-ssgfesbe42
SHA256 b1183c3ff8b058d34e49369d108f00e9dfcc1e29426bb6e3a4db4eb2c5e7aecd
MD5 1079023f564789078dfd4cbbf7a4f60f
SHA1 a53f4b90e994051d023c56c0e64777f119eefff7
SHA512 f337790ff8bc6702f5082040a63626b9140cfa2795973deb59d7a6d97c715d79ef4a43a0f1591877916a0bf0aa5c071694d2e2f3dec1b2892332c56fb7bd49e4
SSDEEP 6144:N/uf2XTixvh7bbWNVbrEqI1z96n9fNgE54zVR71pl:NW+257yMF1zgtGe4z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1079023f564789078dfd4cbbf7a4f60f.dll.exe

.dll 413KB

1079023f564789078dfd4cbbf7a4f60f.dll.exe

IMPHASH b3da9e0a2ac4751e0c486ad7cdc326f7
SHA256 b1183c3ff8b058d34e49369d108f00e9dfcc1e29426bb6e3a4db4eb2c5e7aecd
MD5 1079023f564789078dfd4cbbf7a4f60f
SHA1 a53f4b90e994051d023c56c0e64777f119eefff7
SHA512 f337790ff8bc6702f5082040a63626b9140cfa2795973deb59d7a6d97c715d79ef4a43a0f1591877916a0bf0aa5c071694d2e2f3dec1b2892332c56fb7bd49e4
SSDEEP 6144:N/uf2XTixvh7bbWNVbrEqI1z96n9fNgE54zVR71pl:NW+257yMF1zgtGe4z
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

23612

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

TranslateMessage DefWindowProcW UpdateWindow MessageBoxW CreateWindowExW EndPaint DestroyWindow TranslateAcceleratorW GetMessageW PostQuitMessage LoadCursorW BeginPaint DispatchMessageW GetTouchInputInfo RegisterClassExW RegisterTouchWindow InvalidateRect CloseTouchInputHandle LoadStringW ShowWindow UnregisterTouchWindow

gdi32

LineTo DeleteObject SelectObject Polyline CreatePen MoveToEx

ole32

CoUninitialize CoInitialize CoLoadLibrary CoCreateInstance

kernel32

HeapReAlloc GetLocaleInfoW LoadLibraryW FreeLibrary SetConsoleCtrlHandler IsValidCodePage GetOEMCP LCMapStringW GetCPInfo GetStringTypeW EnterCriticalSection FatalAppExitA LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId MultiByteToWideChar GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetACP GetModuleHandleW GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW HeapAlloc EncodePointer DecodePointer GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetLastError HeapFree GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSetInformation GetVersion HeapCreate HeapDestroy Sleep HeapSize RtlUnwindEx RaiseException RtlPcToFileHeader FlsGetValue FlsFree SetLastError GetCurrentThread FlsAlloc SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA

Name

.text

Size

128KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

264KB

Virtual Size

263KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

.rsrc

Size

1024B

Virtual Size

596B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1079023f564789078dfd4cbbf7a4f60f.dll.exe

user32

gdi32

ole32

kernel32