8b797c58add2e76b1e3654a94300521d2698b2e9e9a3c07f8b117c04388eef1f

Sharing

Copy URL Twitter E-mail

General

Target
8b797c58add2e76b1e3654a94300521d2698b2e9e9a3c07f8b117c04388eef1f
Size 64KB
Sample221201-1b446acg44
SHA256 8b797c58add2e76b1e3654a94300521d2698b2e9e9a3c07f8b117c04388eef1f
MD5 afd268f3fa6a5fe567bb299c2bca4957
SHA1 290b6e5593f82239a3f64275d46a944d21fef45f
SHA512 5419bd6aa709df96c19418c931b85ac936657ac92da83035904353d600e6112b4ef0ec2e929ec18aba5b01e79483035d6bbbc17bd99750ea8a3f4e8ccf1690fd
SSDEEP 768:LzEYAoX5W5e75LZqqWCpbxIgYqMGZU826BuQDa3IQh4BQU2/kaM:/EY9X5We7x1pbqEMT8VuQU47Ykr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8b797c58add2e76b1e3654a94300521d2698b2e9e9a3c07f8b117c04388eef1f

.dll 64KB

8b797c58add2e76b1e3654a94300521d2698b2e9e9a3c07f8b117c04388eef1f

IMPHASH a3fb66c56e3563420b19d98026bfe36f
SHA256 8b797c58add2e76b1e3654a94300521d2698b2e9e9a3c07f8b117c04388eef1f
MD5 afd268f3fa6a5fe567bb299c2bca4957
SHA1 290b6e5593f82239a3f64275d46a944d21fef45f
SHA512 5419bd6aa709df96c19418c931b85ac936657ac92da83035904353d600e6112b4ef0ec2e929ec18aba5b01e79483035d6bbbc17bd99750ea8a3f4e8ccf1690fd
SSDEEP 768:LzEYAoX5W5e75LZqqWCpbxIgYqMGZU826BuQDa3IQh4BQU2/kaM:/EY9X5We7x1pbqEMT8VuQU47Ykr
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

34329

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetCloseHandle InternetOpenUrlA HttpQueryInfoA InternetReadFile InternetOpenA InternetGetConnectedState

mfc42

ord4424 ord3738 ord561 ord3953 ord823 ord2725 ord1131 ord6467 ord535 ord939 ord5710 ord2818 ord860 ord1158 ord540 ord354 ord5861 ord6143 ord4277 ord6883 ord4129 ord2764 ord801 ord541 ord6283 ord6282 ord700 ord5594 ord398 ord4622 ord6877 ord6779 ord913 ord4202 ord4189 ord6930 ord5683 ord668 ord1980 ord3185 ord3178 ord2781 ord2770 ord269 ord6928 ord539 ord1105 ord600 ord1578 ord4080 ord3079 ord3825 ord3831 ord3830 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord1255 ord1253 ord1570 ord1197 ord1243 ord342 ord1182 ord3259 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord5302 ord5300 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord815 ord4274 ord537 ord941 ord940 ord858 ord800 ord2915 ord5572 ord825 ord1577 ord1168 ord1575 ord1176 ord1116 ord826 ord922 ord356

msvcrt

??1type_info@@UAE@XZ _adjust_fdiv _initterm _onexit __dllonexit ?terminate@@YAXXZ _except_handler3 _mbsicmp sprintf atol time srand rand memcmp realloc malloc free _purecall wcslen sscanf memset strncpy strcpy _mbslwr _mbsstr memcpy __CxxFrameHandler strlen _strnicmp atoi

kernel32

FreeLibrary GetModuleHandleA GetShortPathNameA lstrlenW InterlockedDecrement EnterCriticalSection InterlockedIncrement LeaveCriticalSection MultiByteToWideChar WideCharToMultiByte lstrlenA GetModuleFileNameA SizeofResource DeleteCriticalSection lstrcatA GetPrivateProfileStringA GetPrivateProfileSectionNamesA GetTempPathA DeleteFileA CloseHandle Sleep LocalFree LocalAlloc LoadResource FindResourceA GetLastError LoadLibraryExA lstrcmpiA lstrcpynA IsDBCSLeadByte HeapDestroy GetProcAddress InitializeCriticalSection lstrcpyA LoadLibraryA

user32

CharNextA

advapi32

RegEnumValueA RegQueryInfoKeyA RegSetValueExA RegEnumKeyExA RegOpenKeyExA RegCloseKey RegDeleteValueA RegCreateKeyExA RegDeleteKeyA

ole32

CoTaskMemRealloc CoCreateInstance CoTaskMemAlloc CoTaskMemFree

oleaut32

SysFreeString VarUI4FromStr SysAllocString LoadTypeLi RegisterTypeLi LoadRegTypeLi SysStringLen VariantClear VariantChangeType VariantCopy