StartProtect
dtfeglxfwtukfsqdv
Static task
static1
General
-
Target
c9f7248e64b531031822e3cda468bf52fcfe169ad15d7d8ddf379cb27ad8b63b.zip
-
Size
46KB
-
MD5
494416bb0b412f559f7c4d3c02136e34
-
SHA1
7feaba5a07e8935797669e53f6ca8e28069d6d7b
-
SHA256
6162144ef944d15f533c77bce563df5a73367f3b7e536de0913b83ae2c02830b
-
SHA512
bfe2348f55f25c8deaa31d958c5661582e04069f176d170feb7f143bf2e6ee825fbf571f9792cf9c3940da51a2647867dfba631a1d1fe829bf56a7e94bbc3172
-
SSDEEP
768:yl0e9bRk2hZQU+syMh1zZYpQJ43J+MsX6F6y1GcwVmwQMl3SxXBySvYw1wCVwqY5:yjb6YFKMh1dkQG3J+968cwVys8XsK9R2
Score
N/A
Malware Config
Signatures
Files
-
c9f7248e64b531031822e3cda468bf52fcfe169ad15d7d8ddf379cb27ad8b63b.zip.zip
Password: infected
-
c9f7248e64b531031822e3cda468bf52fcfe169ad15d7d8ddf379cb27ad8b63b.dll.dll windows x86
c53224e3d46771139b29e4db817f47f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
WriteFile
GetModuleFileNameW
HeapFree
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapAlloc
RaiseException
OutputDebugStringW
HeapSize
HeapReAlloc
LCMapStringW
RtlUnwind
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
Exports
Exports
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ