5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d[.]zip

General

Target
5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d.zip
Size 310KB
Sample220915-srdcdaddf9
SHA256 b8753f2425f9e029375145992cb20a1c5cf97d9b23208f7069b66436a1296262
MD5 49d58041ec5cfee08e9797985ceaacfc
SHA1 1bd386f4856a413846cb39441528dba61a621f63
SHA512 da2725c521102af40133e63f081e76d7a02a8140a2e2442906c96755861efe4c94b80adf022b13c3a71d0c83067a959b8cb0509d27991540ac96bce76283a566
SSDEEP 6144:5j2Ku8q6609bf0JdDyetJINHCkLMDEvdU54w2DOfwilbMDn4hXz8243DpX:/uBvwbf0JByetJ+LMgvd84sM8Xo2yB
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d.zip

.zip 310KB
5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d

.dll 492KB

5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d.zip

SHA256 b8753f2425f9e029375145992cb20a1c5cf97d9b23208f7069b66436a1296262
MD5 49d58041ec5cfee08e9797985ceaacfc
SHA1 1bd386f4856a413846cb39441528dba61a621f63
SHA512 da2725c521102af40133e63f081e76d7a02a8140a2e2442906c96755861efe4c94b80adf022b13c3a71d0c83067a959b8cb0509d27991540ac96bce76283a566
SSDEEP 6144:5j2Ku8q6609bf0JdDyetJINHCkLMDEvdU54w2DOfwilbMDn4hXz8243DpX:/uBvwbf0JByetJ+LMgvd84sM8Xo2yB
MD5 SHA1 SHA512 SSDEEP

Password

infected

5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d

IMPHASH 779a7d9c34b6f38413dbad9520328324
SHA256 5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d
MD5 f1fcae6d0389759fe0ea7a3615638f48
SHA1 e178ddcd2bc6fea8348fcfca3e61053bec47b633
SHA512 6ee61797840f06abdfe5adc5c95766acdd527378e6e9cb8da40dcdd3b148e6af762a182b389c22d6bfb70300e3354c3956dcbbf6503d35ca71eacfd3693a4886
SSDEEP 6144:WxAQREasWxRW9daXTo7rsOldRs7vBfEgaW5aE3V6G9I0rE5RvRb:9QDsoMdPrFdRsjB8MgEX9Irx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4131

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

92KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

256KB

Virtual Size

253KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.erloc

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d.zip

5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d

user32

winmm

wininet

ws2_32

kernel32

winspool.drv

winscard

rpcrt4

oleaut32

gdi32

rasapi32

imm32

clusapi

advapi32

Sharing

General

Malware Config

Signatures

File Explorer

5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d.zip

5b2a58f205e9d64be93358111daf44ef8b497806277dcdfd9097fde9f08a3d4d

user32

winmm

wininet

ws2_32

kernel32

winspool.drv

winscard

rpcrt4

oleaut32

gdi32

rasapi32

imm32

clusapi

advapi32