PW_Invoice_10-10_scan_200_document_ISO[.]zip

General

Target

PW_Invoice_10-10_scan_200_document_ISO.zip
Size

36KB
MD5

d20d68a45cc68796d5788d3fa7f600c2
SHA1

803c6dede676b577e18b9f2f3a1ea4741c8ef841
SHA256

2ca998eb66519de62fc1ece54bc6c6eff2177d9ac0ae77799aba23813fe49e07
SHA512

4259f942913e833187cab98cda838320b6d12c9a8ecf68d2661207d6c3de16113802ec829a45a5f7452ff98a29c0ffe49acbb7c043f04eec0f0a72367c2d5ca9
SSDEEP

768:qZxnScWZKvPafKH2h5IugzgI2HF3LERTbDrHyXNA9:MnSBKqfKWh5HI2HFo4XNE

Score

N/A

Malware Config

Signatures

Files

PW_Invoice_10-10_scan_200_document_ISO.zip
.zip

Password: infected
Invoice_10-10_scan_200_document_ISO/Documents.lnk
.lnk
Invoice_10-10_scan_200_document_ISO/massawjunmil/combinehelping.bat
Invoice_10-10_scan_200_document_ISO/massawjunmil/freewheeling.dat
.dll windows x64

a8ce5a7531b75661998823badeb4ca06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WaitForSingleObject
CreateEventA
VirtualAlloc
GetConsoleCP
GetConsoleMode
ReadConsoleInputW
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
SetConsoleOutputCP
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetConsoleCursorPosition
SetConsoleTextAttribute
SetConsoleWindowInfo
ScrollConsoleScreenBufferW
ReadConsoleOutputW
SetConsoleTitleW
GetConsoleDisplayMode

uxtheme

DrawThemeEdge
HitTestThemeBackground
ord47

msvfw32

MCIWndCreateA
MCIWndRegisterClass

Exports

Exports

CZOnKvcNagoQvWaJ
FcBngEDLSVga
GMxxJCuNOUxx
HxfgaVWQesU
LgyPeZRTxPwDchW
MIbBJaiUynA
MterDbARYffSJII
NOJLNdjugTfiiWwW
QcYlCvhVfEcgeUeD
WeZBSIwskKXnTY
bVKOMAKRNrcuw
gXVKPUEAmQUeoa
jQeffisJYPtbsHx
uhandahygstdgahuisjdjnsuays

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

a8ce5a7531b75661998823badeb4ca06

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

uxtheme

msvfw32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 480B