dll_args_test[.]zip

General

Target
dll_args_test.zip
Size 403KB
Sample230412-jplfjacd2s
SHA256 2f712ebbf0f4316d130a63c43e5d5fcb571f4c6bb839f535c140f85992b4797d
MD5 2c19e351b59c197fe02002da6e88ef5f
SHA1 3e1dd831a3afdf71f31a17d17cb5e892f7699108
SHA512 a21e8728f74f64212c72bfedc523c1f4650c7bc97cf2d7f464fd474badad48cc3c9269f4ee98968e42f3fc7623cf145c05f3602993416b2bc982377638674979
SSDEEP 12288:S7MRHxH2eIbNxiR4ujgM6oi2p6yYZt2qu3YG8:S7MRRHAun6oiayt2p3Q
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

dll_args_test.zip

.zip 403KB
4c3499f3cc4a4fdc7e67417e055891c78540282dccc57e37a01167dfe351b244

.dll 453KB

dll_args_test.zip

SHA256 2f712ebbf0f4316d130a63c43e5d5fcb571f4c6bb839f535c140f85992b4797d
MD5 2c19e351b59c197fe02002da6e88ef5f
SHA1 3e1dd831a3afdf71f31a17d17cb5e892f7699108
SHA512 a21e8728f74f64212c72bfedc523c1f4650c7bc97cf2d7f464fd474badad48cc3c9269f4ee98968e42f3fc7623cf145c05f3602993416b2bc982377638674979
SSDEEP 12288:S7MRHxH2eIbNxiR4ujgM6oi2p6yYZt2qu3YG8:S7MRRHAun6oiayt2p3Q
MD5 SHA1 SHA512 SSDEEP

Password

infected

4c3499f3cc4a4fdc7e67417e055891c78540282dccc57e37a01167dfe351b244

IMPHASH f9a03bf01870765beb9b5b490126a8c7
SHA256 4c3499f3cc4a4fdc7e67417e055891c78540282dccc57e37a01167dfe351b244
MD5 56018500f73e3f6cf179d3b853c27912
SHA1 a3060a3efb9ac3da444ef8abc99143293076fe32
SHA512 730586717c13d19c4141ce1b44a6e91bcfe4deac8c99eb438d452c965c0b5adac4b2b68da04ad6abc6900bcc410d1801e448831903a8265f3b370896434d8f8e
SSDEEP 12288:BJWFxerI6z4GrTyPy2ROqz/sC670ahgA6:BJWuIE4Gr2PX5UCs0a
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

17640

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WriteFile WideCharToMultiByte CreateProcessA MultiByteToWideChar VirtualFree GetProcAddress VirtualAlloc LocalAlloc CloseHandle GetModuleHandleW CreateDirectoryA CreateFileA GetLastError HeapFree HeapAlloc IsDebuggerPresent IsProcessorFeaturePresent HeapReAlloc GetSystemTimeAsFileTime GetCommandLineA GetCurrentThreadId EncodePointer DecodePointer IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW SetLastError GetProcessHeap ExitProcess GetModuleHandleExW GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection RtlUnwindEx SetStdHandle GetFileType GetStartupInfoW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree SetFilePointerEx GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW LoadLibraryExW OutputDebugStringW WriteConsoleW CreateFileW HeapSize

advapi32

RegOpenKeyExA RegSetValueExA RegCloseKey

shell32

CommandLineToArgvW

Sharing