f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5.zip
- SHA256 ec704de00a60797b2ecc3be32cf7a58ed5d681a2c07e39c26f1302d243aa49cf
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
- Target f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5.zip
- Size 112KB
- Sample220708-l97klsdfh3
- SHA256 ec704de00a60797b2ecc3be32cf7a58ed5d681a2c07e39c26f1302d243aa49cf
- MD5 4a20c7e2d55cc406d7e2e075b43223ac
- SHA1 834a8abc21c5196b913dd39b3958d1700d5df2f0
- SHA512 2ff4fc1728060921e01ba2fc152aadda4e43dae9fc7fb471a55dcda736435e9426f39ea5e98d4bc19ad2b2c448d8b92710b1ba3ffe040cdf992a2c8744d8f087
- SSDEEP 3072:rPY8xBef8pzSjf3hwV6TyAHL0ELgCa8TSW2U:rPYAIc6fxwWrHLvguTSW2U
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5.zip.zip 112KB
-
f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5.exe.exe 235KB
f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5.exe
- IMPHASH 261a21398ec064ef3b57c9095d03d0e8
- SHA256 f3caa040efb298878b99f883a898f76d92554e07a8958e90ff70e7ff3cfabdf5
- MD5 b7a182db3ba75e737f75bda1bc76331a
- SHA1 cf0fe28214ad4106c48ec5867327319eaa82b3c3
- SHA512 5e8d7f65ae231020056a3940d3ca31546986a6130a7956374edc0bc4f139f66f467bf27b66b5cdff73f52dc48ad00f84a9a618fec6db2727c61c44807fb650e8
- SSDEEP 3072:UFnHQbj1nLJXNpVi+1Wqv/Sk3vfpHpLbVS7+Yf1VBUW9WEMNny2NQ+IMI:WHQbj1nVJgq/bHU/fvBUWSC
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
106244
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
Sleep
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpW
OpenProcess
TerminateProcess
CloseHandle
Process32NextW
lstrcpyW
SetFileAttributesW
CreateFileW
GetFileSizeEx
SetFilePointerEx
ReadFile
WriteFile
GetCurrentProcessId
WaitForSingleObject
lstrcatW
MoveFileExW
lstrlenA
GetQueuedCompletionStatus
GetLastError
lstrcmpiW
PostQueuedCompletionStatus
FindNextFileW
FindClose
GetSystemInfo
CreateIoCompletionPort
GetLogicalDrives
CreateThread
WaitForMultipleObjects
HeapFree
GetProcessHeap
HeapAlloc
VirtualFree
CreateFileMappingW
MapViewOfFile
VirtualAlloc
UnmapViewOfFile
LoadLibraryW
GetModuleHandleW
VirtualProtect
GetTickCount
FindVolumeClose
FindNextVolumeW
SetVolumeMountPointW
lstrlenW
GetVolumePathNamesForVolumeNameW
FindFirstVolumeW
FindFirstFileW
GetDriveTypeW
WriteConsoleW
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
ReadConsoleW
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
GetStdHandle
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
GetFileType
MultiByteToWideChar
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
CompareStringW
LCMapStringW
GetConsoleMode
advapi32
CryptGenRandom
ControlService
EnumDependentServicesA
QueryServiceStatusEx
OpenServiceA
CloseServiceHandle
OpenSCManagerA
CryptAcquireContextW
mpr
WNetGetConnectionW
rstrtmgr
RmStartSession
RmRegisterResources
RmGetList
RmEndSession
Name
.text
Size
153KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
22KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gehcont
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ