ad9cba819eb0bfa4d5701c2cd72490dacfcb86307e5a2ab5e0c4c24cb8ad4cb9[.]zip

General

Target

ad9cba819eb0bfa4d5701c2cd72490dacfcb86307e5a2ab5e0c4c24cb8ad4cb9.zip
Size

223KB
MD5

8a2605ee7de1e8ede8f780267a9ba85c
SHA1

a006160c5f90d2ff7c47359ba45ef8705bc78613
SHA256

c8f76f38b870ddfaa847657c497ecf02e3808914b251dd48bbc51879c771cd03
SHA512

2e0a803934b83979fd3cd8759303c5cf295eea9802b47d49cffa9d628f757b515dd8ca1afd3508e08fd4bef01d764d75d8430eb7670cd8d05eab28ebb3019211
SSDEEP

6144:/P3v0T5q/YSvAz6UUBWmCVN168T8OiCJHDtMai6VLQz:H88Sh/p168TlCait

Score

N/A

ad9cba819eb0bfa4d5701c2cd72490dacfcb86307e5a2ab5e0c4c24cb8ad4cb9.zip
.zip

Password: infected
burps.db
.dll regsvr32 windows x86

4105c8801ba046addd9a878f42383222

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetCurrentDirectoryA
CreateFileA
SetFilePointer
CloseHandle
GetLastError
PeekNamedPipe
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
ExitProcess
CreateThread
GetCurrentThreadId
GetSystemDirectoryA
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateNamedPipeA
GetCurrentActCtx

Exports

Exports

DllRegisterServer
KXI
MHx229
Tin22PP
Vaevy8305

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ