e4599edac6129ce7ad01caa1a39806db3125f166686e2f0f7dc6c6dda487632a[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

e4599edac6129ce7ad01caa1a39806db3125f166686e2f0f7dc6c6dda487632a.zip
Size

1.0MB
MD5

4eb2d8c28bdc308837d1a4b708f4975f
SHA1

6a012fdb9262a999fc175e5fd94846febc85a373
SHA256

bddd5382f8179a381a6c76e151e525b7329c56bd99f42e9dc784a29e54949aa1
SHA512

3d63c83710df19828fce15c367e2575e7aa5a18807ad0e42c8d0a4d69c855c4cfc771101e9613698ca604683a5bb7ca1827511416671a5cac0165f039d67bfd2
SSDEEP

24576:VFvZO4ECA6qlBQ4fQJuKSDyquVPajWT+oz5ilEyka51qhp5S:bUtamL4IKSpuFT+oz5UxkBhp5S

Score

N/A

Malware Config

Signatures

Files

e4599edac6129ce7ad01caa1a39806db3125f166686e2f0f7dc6c6dda487632a.zip
.zip

Password: infected
e4599edac6129ce7ad01caa1a39806db3125f166686e2f0f7dc6c6dda487632a.exe
.exe windows x64

5c141c00cfea3a401305e1a4badb76b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlCaptureContext
GetProcAddress
LeaveCriticalSection
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentThreadId
SetLastError
SetStdHandle
GetLastError
GetEnvironmentStringsW
GetCommandLineW
GetModuleHandleW
GetOEMCP
LCMapStringW
CreateFileW
MultiByteToWideChar
RtlVirtualUnwind
IsProcessorFeaturePresent
RtlUnwindEx
WriteFile
GetModuleHandleA
GetCurrentProcessId
TlsAlloc
CompareStringW
WideCharToMultiByte
GetACP
GetStdHandle
TlsSetValue
ExitProcess
TerminateProcess
TlsGetValue
TlsFree
GetSystemTimeAsFileTime
GetCommandLineA
GetModuleHandleExW
GetCPInfo
HeapFree
QueryPerformanceCounter
HeapSize
GetStringTypeW
GetFileType
SetFilePointerEx
LoadLibraryExW
FindNextFileW
GetCurrentProcess
GetConsoleMode
FreeLibrary
FlushFileBuffers
HeapReAlloc
DeleteCriticalSection
FindClose
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableW
GetStartupInfoW
IsValidCodePage
CloseHandle
InitializeSListHead
RaiseException
SetUnhandledExceptionFilter
RtlLookupFunctionEntry
FindFirstFileExW
FreeEnvironmentStringsW
GetProcessHeap
HeapAlloc
IsDebuggerPresent
GetConsoleOutputCP
EnterCriticalSection
WriteConsoleW

Sections

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

LDATA
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

5c141c00cfea3a401305e1a4badb76b0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.data Size: 9KB - Virtual size: 8KB

.pdata Size: 4KB - Virtual size: 3KB

LDATA Size: 512B - Virtual size: 17B

.qdata Size: 512B - Virtual size: 9B

.rdata Size: 1.3MB - Virtual size: 1.3MB

.text Size: 107KB - Virtual size: 107KB

.rsrc Size: 37KB - Virtual size: 37KB

.reloc Size: 2KB - Virtual size: 1KB

.data
Size: 9KB - Virtual size: 8KB

.pdata
Size: 4KB - Virtual size: 3KB

LDATA
Size: 512B - Virtual size: 17B

.qdata
Size: 512B - Virtual size: 9B

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 107KB - Virtual size: 107KB

.rsrc
Size: 37KB - Virtual size: 37KB

.reloc
Size: 2KB - Virtual size: 1KB