1LP0173927181[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

1LP0173927181.zip
Size

426KB
MD5

ff650d4d1e1a3a8497fe0ebf60a1a001
SHA1

e0a1ba4b97a8306c5a61ac999f65be93709f2717
SHA256

266143670a99431ef7dd3b46a639c4332c3de982accc0ec252bef3da25485232
SHA512

2182e7279c443762b40b73f6729ce3314c72dc69a89d3cab6de78677733a2c6d1416c49c5d13d66d47cb30a9381c978d2199812ad0f3f43f08cdb7d040ce22e3
SSDEEP

6144:377p5MvcEZdzC68xV5tJcyhYtDzPKtw/9oo1Eg7//bK3VBU22lK3a3vLqT:377oVC68jJcyCZmMa2bmjaK31T

Score

N/A

Malware Config

Signatures

Files

1LP0173927181.zip
.zip

Password: PQbhu8bgt5!@3
LP0173927181.IMG
.iso

Password: PQbhu8bgt5!@3
1LP01739.LNK
.lnk
LP017392.EXE
.exe windows x86

Password: PQbhu8bgt5!@3

14de3fc404cdd7997fe95d0c672162e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
K32GetPerformanceInfo
K32GetProcessMemoryInfo
K32QueryWorkingSetEx
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFileEx
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
ProcessIdToSessionId
QueryDosDeviceW
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
UnregisterWaitEx
VirtualAlloc
VirtualAllocEx
VirtualFree
GetModuleFileNameA
SizeofResource
VirtualProtect
SetLastError
EnterCriticalSection
InitializeCriticalSectionEx
GetCurrentThreadId
lstrcmpA
GetModuleHandleA
Sleep
GetLastError
SetEvent
LockResource
GlobalAlloc
CloseHandle
RaiseException
FindResourceExW
InitOnceExecuteOnce
LoadResource
FindResourceW
DecodePointer
GetProcAddress
GlobalLock
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
WideCharToMultiByte
lstrcmpiA
GlobalUnlock
MulDiv
CreateFileW
SetFilePointerEx
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
VirtualQuery
GetSystemInfo
TlsFree
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
FlushInstructionCache
InterlockedPushEntrySList
WriteConsoleW
InterlockedPopEntrySList
EncodePointer
HeapSize
HeapSetInformation
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetWindowsDirectoryW
GetVersionExW
GetVersion
InitializeCriticalSection
GetUserDefaultLocaleName
GetUserDefaultLangID
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadId
GetThreadContext
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleMode
GetConsoleCP
GetComputerNameExW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetACP
IsDBCSLeadByte
FreeLibrary

user32

GetClassNameA
ScreenToClient
UnionRect
EndPaint
BeginPaint
ReleaseDC
InvalidateRect
ReleaseCapture
RegisterClassExA
PtInRect
GetParent
FillRect
GetDesktopWindow
UnregisterClassA
GetDlgItem
GetClientRect
CharUpperA
SetCapture
SendMessageA
CharNextW
SetFocus
IntersectRect
CreateWindowExA
SetWindowRgn
EqualRect
SetWindowPos
GetDC
DestroyWindow
LoadCursorA
GetFocus
GetWindow
GetClassInfoExA
GetKeyState
CharNextA
GetWindowRect
GetWindowTextLengthA
DefWindowProcA
MoveWindow
ShowWindow
IsWindow
InvalidateRgn
OffsetRect
RegisterWindowMessageA
RedrawWindow
PostThreadMessageA
SetWindowLongA
ClientToScreen
CallWindowProcA
DestroyAcceleratorTable
GetWindowTextA
IsChild
CreateAcceleratorTableA
GetWindowLongA
SetWindowTextA
MessageBoxA
GetSysColor

gdi32

GetDeviceCaps
CreateRectRgnIndirect
GetStockObject
SetWindowOrgEx
DeleteDC
SelectObject
SaveDC
CreateCompatibleBitmap
BitBlt
GetTextMetricsA
GetObjectA
SetTextAlign
SetMapMode
CreateDCA
CreateSolidBrush
DeleteObject
LPtoDP
RestoreDC
CreateCompatibleDC
TextOutA
SetViewportOrgEx

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA

shell32

SHGetFileInfoA

ole32

CoAddRefServerProcess
CoReleaseServerProcess
OleRegGetUserType
OleLockRunning
CLSIDFromString
OleRegEnumVerbs
OleRegGetMiscStatus
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CLSIDFromProgID
CreateOleAdviseHolder
CoCreateInstance
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoInitialize
OleUninitialize
CoGetClassObject
StringFromCLSID

oleaut32

VariantCopy
VariantChangeType
UnRegisterTypeLi
LoadRegTypeLi
VariantInit
SysFreeString
OleCreateFontIndirect
RegisterTypeLi
SysAllocString
OleCreatePropertyFrame
SysStringLen
SysAllocStringLen
VariantClear
VarUI4FromStr
LoadTypeLi

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: PQbhu8bgt5!@3

Password: PQbhu8bgt5!@3

Password: PQbhu8bgt5!@3

14de3fc404cdd7997fe95d0c672162e1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 151KB - Virtual size: 150KB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 426KB - Virtual size: 426KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 151KB - Virtual size: 150KB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 426KB - Virtual size: 426KB

.reloc
Size: 11KB - Virtual size: 10KB