7864246370[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

7864246370.zip
Size

46KB
MD5

edea874ddd4f020f5babdf2ec47dff25
SHA1

84f26ea42aa66ef2ee8da67687dffe7837a563b9
SHA256

5dc90a97d69b15110ee28453713aa5f46949c10ba7ec93e574f068a84e705ebd
SHA512

36ec91e8e1f5d3c8cd361069e9ba71a93595cb7b21e5079d58dcd2037ec31d437c61f168adfeb098e3afb1bcb55e8a6004b77b3acfda4d2ff7581c7dbd2273b9
SSDEEP

768:yn5CBHEKLkdbf92GSld6GY97RHD8/6iNjD1FKg2HH5WaLj3KhrFcqaKsGZItrYr8:yn5CREJf9U3YRyhDkHHZHLj6Vcnntru8

Score

N/A

Malware Config

Signatures

Files

7864246370.zip
.zip

Password: infected
7b0eba8a89281d4d0b000b5fef126f1f82ae469d8e2928cb794ee73a14a3cd8a
.dll windows x86

74fb0a076827bbed340db3c01c57dcd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowLongW

advapi32

PrivilegedServiceAuditAlarmA

kernel32

WideCharToMultiByte
VirtualAlloc
FormatMessageA
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
WriteFile
LoadLibraryA
InitializeCriticalSection
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

Exports

Exports

Anubis
Cockneyfies
Dichotomized
Digitised
Dishevel
Disobeys
Driveins
EVP_PKEY_free
EVP_PKEY_new
EVP_des_ede3_cbc
Emblematised
Etymologizes
Explicated
Fines
Implode
Misconstrue
OPENSSL_init_crypto
OPENSSL_sk_pop_free
PEM_read_PrivateKey
PEM_write_PrivateKey
PKCS12_create
PKCS12_free
PKCS12_parse
Property
Revitalizing
Shoes
Wited
X509_alias_get0
X509_free
d2i_PKCS12_fp
i2d_PKCS12_fp

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

74fb0a076827bbed340db3c01c57dcd5

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 48KB - Virtual size: 45KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 48KB - Virtual size: 45KB

.reloc
Size: 8KB - Virtual size: 5KB