0cb6dfa3db8548fe357957906712d14e0f32a2e8b30c9c60636df85370155852

Sharing

Copy URL Twitter E-mail

General

Target
0cb6dfa3db8548fe357957906712d14e0f32a2e8b30c9c60636df85370155852
Size 233KB
Sample221201-gwkfpseg6s
SHA256 0cb6dfa3db8548fe357957906712d14e0f32a2e8b30c9c60636df85370155852
MD5 cedc7139d3247efdd94c0e0ff17abd19
SHA1 47969f17abf163ccc3a12ac2d57bf234ebd5f044
SHA512 b43a4214c9032a04cd8d954ab46ef53c790fc8547b347f2424832732bc5f2f2829510df0fdd3dd98bb0720aaa2b6ae2df4d733b8aa5723d25d02a328d6565102
SSDEEP 6144:RvI11NXZTWO0nML7xDrUTyT4KFEYRhna2:Rc1NX9WOn7pUI4CRlJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0cb6dfa3db8548fe357957906712d14e0f32a2e8b30c9c60636df85370155852

.dll 233KB

0cb6dfa3db8548fe357957906712d14e0f32a2e8b30c9c60636df85370155852

IMPHASH d23ac625cc2ae5db2202166241022027
SHA256 0cb6dfa3db8548fe357957906712d14e0f32a2e8b30c9c60636df85370155852
MD5 cedc7139d3247efdd94c0e0ff17abd19
SHA1 47969f17abf163ccc3a12ac2d57bf234ebd5f044
SHA512 b43a4214c9032a04cd8d954ab46ef53c790fc8547b347f2424832732bc5f2f2829510df0fdd3dd98bb0720aaa2b6ae2df4d733b8aa5723d25d02a328d6565102
SSDEEP 6144:RvI11NXZTWO0nML7xDrUTyT4KFEYRhna2:Rc1NX9WOn7pUI4CRlJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA DeregisterEventSource

msvcrt

malloc memcpy memmove memset strrchr towupper wcschr wcsrchr wcsstr wcstod wcstol wcstoul wctomb iswxdigit iswspace isleadbyte free _wtol _write _wcsupr _wcsnicmp _wcsicmp _vsnwprintf _unlock _ultow _stricmp _snprintf _purecall _onexit _lseeki64 _lock _itoa _isatty _iob _initterm _fileno _errno _callnewh _amsg_exit __pioinfo __dllonexit __badioinfo _XcptFilter _CxxThrowException

kernel32

CreateFileW CreateSemaphoreA CreateSemaphoreW DebugBreak WriteFile WideCharToMultiByte WaitForSingleObject VirtualProtect VirtualAlloc VerifyVersionInfoW VerSetConditionMask UnhandledExceptionFilter TerminateProcess Sleep SetUnhandledExceptionFilter SetStdHandle SetLastError SetConsoleTextAttribute RtlUnwind ReleaseSemaphore ReadFile QueryPerformanceCounter OutputDebugStringA MultiByteToWideChar LocalReAlloc LocalFree LocalAlloc LoadLibraryA LeaveCriticalSection InterlockedIncrement InterlockedExchangeAdd InterlockedExchange InterlockedDecrement InterlockedCompareExchange InitializeCriticalSectionAndSpinCount InitializeCriticalSection HeapWalk HeapUnlock HeapReAlloc HeapLock HeapFree HeapDestroy HeapCreate HeapAlloc GlobalFree GlobalAlloc GetVersion GetTickCount GetSystemTimeAsFileTime GetSystemInfo GetStdHandle GetStartupInfoA GetProcessHeap GetProcAddress GetOEMCP GetModuleHandleW GetModuleHandleA GetModuleFileNameW GetLocalTime GetLastError GetFileSize GetEnvironmentVariableW GetCurrentThreadId GetCurrentProcessId GetCurrentProcess GetCommandLineA GetACP FormatMessageW FormatMessageA FlushFileBuffers FindNextFileW FindFirstFileW FindClose ExpandEnvironmentStringsW ExitProcess EnterCriticalSection DisableThreadLibraryCalls DeleteTimerQueueTimer DeleteCriticalSection CloseHandle

ole32

CoCreateInstance CLSIDFromString CoTaskMemFree

oleaut32

VariantClear VariantInit SysFreeString SysAllocString