dd57c9d80ee108522b502804d1beb9121712c3e274eeb3817ad75065c63e6d5d

Sharing

Copy URL Twitter E-mail

General

Target
dd57c9d80ee108522b502804d1beb9121712c3e274eeb3817ad75065c63e6d5d
Size 581KB
Sample221201-vbpftacc9v
SHA256 dd57c9d80ee108522b502804d1beb9121712c3e274eeb3817ad75065c63e6d5d
MD5 a23e53950207a51c7a855234af2b2b0c
SHA1 668702f94beaac11bb1c306f85b1934727a73d62
SHA512 606bf5eb2649786586134d071b9ff8bd8cc2d70d2a70e42aa10338de7e0fe2299dcbd33ebf9ec53a5c8432fe2df5355f1c402f57c2fa7b881b63a964f2f6277d
SSDEEP 12288:mT8TrTr0rswieKcoFXJcyxR+8fbe4FY9a0PWP:u8Tnr0gF9coFXJBxd/Y9aL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

dd57c9d80ee108522b502804d1beb9121712c3e274eeb3817ad75065c63e6d5d

.dll 581KB

dd57c9d80ee108522b502804d1beb9121712c3e274eeb3817ad75065c63e6d5d

IMPHASH bffa377cf1b1e8173e354df6c265a3ce
SHA256 dd57c9d80ee108522b502804d1beb9121712c3e274eeb3817ad75065c63e6d5d
MD5 a23e53950207a51c7a855234af2b2b0c
SHA1 668702f94beaac11bb1c306f85b1934727a73d62
SHA512 606bf5eb2649786586134d071b9ff8bd8cc2d70d2a70e42aa10338de7e0fe2299dcbd33ebf9ec53a5c8432fe2df5355f1c402f57c2fa7b881b63a964f2f6277d
SSDEEP 12288:mT8TrTr0rswieKcoFXJcyxR+8fbe4FY9a0PWP:u8Tnr0gF9coFXJBxd/Y9aL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30938

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RegisterClipboardFormatA CharNextA CharNextW CreateDialogParamA DestroyWindow GetForegroundWindow GetParent GetSystemMetrics GetWindowLongA UnhookWindowsHookEx ShowWindow SetWindowsHookExA SetFocus CallNextHookEx MoveWindow IsZoomed IsWindowVisible IsIconic GetWindowRect

ole32

CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemFree CoTaskMemRealloc CoUninitialize CreateDataAdviseHolder StringFromGUID2

advapi32

RegQueryInfoKeyA RegOpenKeyExA RegEnumKeyExA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegCloseKey RegSetValueExA

kernel32

lstrlenW lstrlenA lstrcmpiA WriteFile WideCharToMultiByte VirtualQuery VirtualProtect VirtualFree IsValidCodePage TlsSetValue TlsGetValue TlsFree TlsAlloc TerminateProcess Sleep SizeofResource SetUnhandledExceptionFilter SetLastError SetHandleCount LCMapStringA LCMapStringW LeaveCriticalSection LoadResource MultiByteToWideChar QueryPerformanceCounter RaiseException VirtualAlloc GetProcessPriorityBoost DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection ExitProcess FindResourceA FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetModuleHandleW GetOEMCP GetProcAddress IsDebuggerPresent GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTickCount GlobalAlloc GlobalLock GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize InitializeCriticalSection InitializeCriticalSectionAndSpinCount InterlockedDecrement InterlockedIncrement IsDBCSLeadByte RtlUnwind

oleaut32

LoadTypeLi RegisterTypeLi SysAllocString SysFreeString SysStringLen UnRegisterTypeLi VarUI4FromStr VariantClear