3b3d7619eb68e228800d9c3f5ac23ee3[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
3b3d7619eb68e228800d9c3f5ac23ee3.dll.exe
Size 12.4MB
Sample230316-kep7eahh86
SHA256 ae8bce2c950ea683276425246918a82935cb7214d08190d5996e31876208ab77
MD5 3b3d7619eb68e228800d9c3f5ac23ee3
SHA1 3007b4cd5ab4d940e2cf9e116134f22deda586ea
SHA512 a37c4e9ff41b51803f34f7257a830d54bb50bd73f019e6bde80e86f6ed23660d2d1e3cf0fa695372648bef05175b7c9e41f1a92f9c7e88331ff16d54ed6d6fee
SSDEEP 393216:jDGjz5THB+jnTTxLH143tmCHbJ/CCGKan9I:jgdTHB6nTTpstHwCI9I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

3b3d7619eb68e228800d9c3f5ac23ee3.dll.exe

.dll 12.4MB

3b3d7619eb68e228800d9c3f5ac23ee3.dll.exe

IMPHASH 07b23fc5e1b71c8e48ba0022040270f6
SHA256 ae8bce2c950ea683276425246918a82935cb7214d08190d5996e31876208ab77
MD5 3b3d7619eb68e228800d9c3f5ac23ee3
SHA1 3007b4cd5ab4d940e2cf9e116134f22deda586ea
SHA512 a37c4e9ff41b51803f34f7257a830d54bb50bd73f019e6bde80e86f6ed23660d2d1e3cf0fa695372648bef05175b7c9e41f1a92f9c7e88331ff16d54ed6d6fee
SSDEEP 393216:jDGjz5THB+jnTTxLH143tmCHbJ/CCGKan9I:jgdTHB6nTTpstHwCI9I
MD5 SHA1 SHA512 SSDEEP

windows x64

PE Signature issue

Digest

5a:66:a1:bb:fd:d1:6e:a4:a5:48:61:72:41:f8:52:e2:af:9e:e5:d8:bc:1b:55:f6:83:24:2e:58:a5:6d:e1:0e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

8849637

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

wsprintfA CharUpperBuffW

ws2_32

getaddrinfo closesocket shutdown send setsockopt freeaddrinfo recv WSAIoctl select connect inet_ntoa inet_addr htons ioctlsocket WSAStartup socket

advapi32

GetTokenInformation OpenProcessToken GetSidSubAuthority

kernel32

WriteFile SetFilePointer CreateFileA VirtualFree LocalFree LocalAlloc GetLocalTime SetEvent WaitForSingleObject ExitThread CloseHandle CreateThread GetVolumeInformationA VirtualAlloc SystemTimeToFileTime Sleep GetCurrentProcess FileTimeToSystemTime CreateEventA GetSystemTimeAsFileTime CreateEventA GetModuleHandleA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree HeapAlloc HeapFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar GetModuleHandleW LoadResource FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers CreateFileA FlsSetValue GetCommandLineA GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RaiseException RtlPcToFileHeader RtlUnwindEx LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

secur32

GetUserNameExA GetUserNameExW

ole32

CoUninitialize CoCreateInstance CoInitialize

Name

VvT"<;zd

Size

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

yr5aGcw\

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

9OTQ.L=k

Size

Virtual Size

595B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

2!C`9z.;

Size

Virtual Size

432B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

[rd,OMMv

Size

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

wu0&fIa<

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

r0?ng8X0

Size

12.3MB

Virtual Size

12.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

:0Of[v(^

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

0CO!k.J>

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ