1663928868111[.]zip

General

Target

1663928868111.zip
Size

560KB
MD5

9a0665b447c3e0ea0815387b46cfc237
SHA1

86d320327f6eb1c1df0b80567aa92787379b3bb0
SHA256

06c0a1eb89513b90e23b5840bcfef6295cc71c055c1101d364ceb64103425bf4
SHA512

9db4a68963a4e398dafe05c39533c7d8777b12e84676f6b9c3a6df6c626e685cdaa5b58fc9cc7c4154ad00564d18369a2710d7004323477ec6289ffadf9d305e
SSDEEP

6144:Z/+eocFM1FRP6XcCHbMQwG0AkSQUzVBUgS9fVyTYMGrC6LxR9TKXytZ5yMdG4xC:Zm1X6TI7bbU/98URGrC6zcAyM84I

Score

N/A

Malware Config

Signatures

Files

1663928868111.zip
.zip

Password: cautionhandlewithcare
pdfdrizzle.dll
.exe windows x86

Password: cautionhandlewithcare

e05e65aef7a941b2908264dc060366d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetCommandLineA
GetStartupInfoA
GetLastError
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
CreateFileA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetEndOfFile
GetProcessHeap
ReadFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 966KB - Virtual size: 966KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdfdrizzle.dll.METADATA

Sharing

General

Malware Config

Signatures

Files

Password: cautionhandlewithcare

Password: cautionhandlewithcare

e05e65aef7a941b2908264dc060366d4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 966KB - Virtual size: 966KB

.data Size: 5KB - Virtual size: 11KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 966KB - Virtual size: 966KB

.data
Size: 5KB - Virtual size: 11KB