55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6[.]zip

General

Target
55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6.zip
Size 310KB
Sample220907-sagcpshfap
SHA256 96a5e9be7024b66e3b247ca291159a36eb1003832bb5ffa312555fbcdc4525b8
MD5 926366397bf26f55e2c744d10b362d64
SHA1 f7051f71e09c848d5438bf3902d5896cc91575ca
SHA512 30496334266346bf8a0bbd10cd1a25f56e00dde2aa4f2f0dfa45fdc420529cfc61fd050be642d5a6c29d7a763e7ba70dec6fa39c836016ca2cfb2cead6d7926e
SSDEEP 6144:Hm3nc8sSvktjCoJRt/W3Q96aBnbz8xWbkcCkPNPnRHnaM:G3cIvkt2KRt/W35EX8x/cCkPN/RHr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6.zip

.zip 310KB
55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6

.dll 492KB

55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6.zip

SHA256 96a5e9be7024b66e3b247ca291159a36eb1003832bb5ffa312555fbcdc4525b8
MD5 926366397bf26f55e2c744d10b362d64
SHA1 f7051f71e09c848d5438bf3902d5896cc91575ca
SHA512 30496334266346bf8a0bbd10cd1a25f56e00dde2aa4f2f0dfa45fdc420529cfc61fd050be642d5a6c29d7a763e7ba70dec6fa39c836016ca2cfb2cead6d7926e
SSDEEP 6144:Hm3nc8sSvktjCoJRt/W3Q96aBnbz8xWbkcCkPNPnRHnaM:G3cIvkt2KRt/W35EX8x/cCkPN/RHr
MD5 SHA1 SHA512 SSDEEP

Password

infected

55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6

IMPHASH 779a7d9c34b6f38413dbad9520328324
SHA256 55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6
MD5 305a0d65b83ad1c1a1aebb5ba55da5e1
SHA1 2f232ac3aaeba57947377fa52e9b7a0ecdf7d824
SHA512 516bf25858a7995ea3438f50ef5485ea496122efeba1b8f3e7e81c22e667ea076301a66384265bcae88f0f5adf4dea4b9b87ea529fba78e153f3c6263417179f
SSDEEP 6144:PxAQREasWxRW9daXTo7rsOldRs7vBfEgaW5ap3V6G9I0rE5RvRb:GQDsoMdPrFdRsjB8MgpX9Irx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4131

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

92KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

256KB

Virtual Size

253KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.erloc

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6.zip

55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6

user32

winmm

wininet

ws2_32

kernel32

winspool.drv

winscard

rpcrt4

oleaut32

gdi32

rasapi32

imm32

clusapi

advapi32

Sharing

General

Malware Config

Signatures

File Explorer

55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6.zip

55539d3435922553f0f50a51ae32b2bf2fede23591f29bcfef1a80698a4cc1a6

user32

winmm

wininet

ws2_32

kernel32

winspool.drv

winscard

rpcrt4

oleaut32

gdi32

rasapi32

imm32

clusapi

advapi32