3f354aadf772b7befe09bbae50d5fa1f114b312f[.]zip

Resubmissions

19/08/2022, 03:19

220819-dvmb5affen 10

16/08/2022, 11:00

220816-m366yaahh5 10

Sharing

Copy URL Twitter E-mail

General

Target

3f354aadf772b7befe09bbae50d5fa1f114b312f.zip
Size

252KB
MD5

1218376affed03a42c66963c4e9054ef
SHA1

1e454b135feae4752de8be3557f8964d06b355a2
SHA256

1ed2d7cf1739f52439b49f3d128810c1d47ea5342da890271e88807bec0a3e70
SHA512

b2e86d86fd286dbdbc556640f53f676ee8edc766c7d12cc62b6138cf6e862ba32fc04deafdc7447fbe019fa5e5829b9f7565d9b95d92830e86bea377ca9786e8
SSDEEP

6144:b00ig5d2zuQGpsVEBir1S2NNvWvHrAGcaK4cN2:b00hKycRNNBGcWcA

Score

N/A

Malware Config

Signatures

Files

3f354aadf772b7befe09bbae50d5fa1f114b312f.zip
.zip

Password: infected
3f354aadf772b7befe09bbae50d5fa1f114b312f.rl
.dll regsvr32 windows x64

Password: infected

0df92fffeb871d4506ed9cb512c40337

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetConsoleCP
FlushFileBuffers
GetStringTypeW
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
GetLocaleInfoEx
GetConsoleMode
GetDateFormatEx
GetTimeFormatEx
HeapReAlloc
LoadLibraryW
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
SetFilePointerEx
CloseHandle
SetStdHandle
WriteConsoleW
CompareStringEx
VirtualAlloc
IsValidCodePage
SetConsoleCtrlHandler
LoadLibraryExW
FreeLibrary
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
Sleep
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
RtlPcToFileHeader
RaiseException
SetLastError
GetCurrentThread
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
FatalAppExitA
CreateFileW

user32

DispatchMessageW
DefWindowProcW
UpdateWindow
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
LoadCursorW
BeginPaint
TranslateMessage
GetTouchInputInfo
RegisterClassExW
RegisterTouchWindow
InvalidateRect
CloseTouchInputHandle
LoadStringW
ShowWindow
UnregisterTouchWindow
CreateWindowExW
MessageBoxW

gdi32

LineTo
DeleteObject
SelectObject
Polyline
CreatePen
MoveToEx

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Exports

Exports

AgbPjIIpVgqthphoEDil
BKSGZWoCdRRZ
BZTksnRcUlhonwlz
CjrsBMiBmkicdr
CmPdXZgONRdo
CqWBHGttYonxcMgEXtWmEV
CqfdBAbUzJuk
DllRegisterServer
DnfTgZW
DvCoyekegkndrsDH
EKOwocbcIwdLHiNkmUrCl
Efftvk
FcnNOfBdAbvwh
FhWBdzcrvdqNZpMbhTZIQreGg
HDMQleZswu
Hdeeaz
HntGFSDqFuaXKvmdzc
INyldipDCcKlVrKC
IPLOzdLHDnJsRZZSfheCeC
IaeOuzmqCryumRTPPskV
JCAlkukqytGID
JEGjndtWFlWFyoYbYUNYY
JNYsjOB
JkldymVNTbHmIbGniCoBGOzspu
KalUpcZvvbCFIYCrlL
KiaWQYuuSYHHyT
LSrIHq
LYfdtrLPTxBVKkteISWUm
MWGNGWJ
McgjRHNyPOogpyBYdDPYzsIQY
MxlvDhnBlAPZjtlgeKtd
NjvoTPmqDrPEXUABhNM
NyIrRUUzWWpqvwMLPV
OhSykoZko
OqvdqWJRwTIFUYXDznqoQN
OuXvnRTQQr
OvMYipOdPUXdCkzws
OvpzKEvLIdbKwHg
PhRiOGJPimxM
PqtcGEHjRRik
QJDpWzH
QQGjjFMISSsj
RUDtQtmERxgvcUVIdt
RdxJnVwvoXPqLpayiyx
RgykWytxvwrwle
SGPzEOBxTkskEptCHqzHIte
SdRdRnKqAOHzB
ShRJfN
SpXdoShiJMKnXMZQRLoCod
TALhteDRIHAoGVDBAmRzZL
TNBGNcrxmWvbbtZJVvZJitVrk
ToYhuDk
USyLHMFTdqFHLuQw
UWqlzwAYOhhNmXndjFJVnsXwPd
UXaqGIpnPecWqTE
WlltjEgpumpOTXCuaAyboQwJ
XIqqijQw
XpxfbuT
YUzCTxdUqaW
YucwvuLkfnHdBKVbSfXLBGl
ZixRNYXKRekDfmCEYZoxzJ
bUsYmprNYOLbGIE
byHsisaMofkfyoDOtavNQrO
cFcBoHO
cQoMbidXbjBBMZd
cjjABlZoJTtcvmD
coLMrfARjIDNCxu
dLDViNcdkqQliqGkidIZRVbJgM
djRrAnnSnWinJbWNbd
dkgxozstsmRlyGuop
ewMBfqDHJ
fTaVkagdLEWKEJOVGBjf
fdnfYXBsqwTpWEcJBhNEHNTgQW
gAyiZWdJHpORUWX
gGeztnVsVCWLdNTVTIeloyD
gJTUpx
giMnkjMiGlCEDpqgOmiZ
gylzVwTrSh
hYAXzQyeUyJBDytBwxAITqDe
iTRNBvmayaTMPvBcvJlXQPGg
iULoPlbTSVTwynTFCSVE
iXagMbgRuZCVL
idOPTJlzrBuIq
jpNttOWsoo
jrtoSRnBzGBBnRolvQ
kKSCBFikJKYCtQj
kTQoQBJneyVuifo
kaHKYCCiylRLUjbEW
khhgxOMtBUBzjzzQXucUmB
lqDzMqKtEYtKi
mLsJOgFyg
maWbEfiRBiAmHKJNVCEiOstByJ
myJcLUzQSvByIK
nAfsNiOjPSFY
nBTSHBjKDbFEVc
oJzZQfjAvPqutTezmIhkqrZE
oMhSCyPPpNF
oRAXmSYHGTnITuVY
ofSDLgfNeeHbycQSiNLhLB
oygfvoqUPduJzPADTzqR
pHzgrLIAoFjM
pMgeuEmNxBSpwSKEu
qJxKtEtCuHDcffIGTqTqr
qRhbeBwGaMjcCGwjAOrtB
rBnENDY
rGEvBopTURaavSamdDGjxw
rYfXDWHai
rkaGDDsTAZeFZIGZEIx
sKOCvqKAWbIoyHcSW
sMmANDkKtKSlz
srZxruZWs
tYKPgiqDRhpmQY
uHNmzqvBHZvth
uktFeTZq
wcTAWwHxdQYtToyMegRVg
weBiLMAFPtJnu
xLsuLpLuLBqZVDDxaNCiyhpmw
xdJAimscKJa
xrQsbpELbFRUm
yMHPbbjlNALXIomHFnhRe
ybOyXv
yeZGhUspKfEn
yiwEbzdfNCFvYZsPHxcHBfkz
yjNCDn
yybFqbyhVPff
zHCDbtQQb
zOFcvrGXrNOLLvm
zfbJOeFbtt
zkDheLpUsulhmkWwTYkBEwi
znHHHKzQsbiMRY

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

0df92fffeb871d4506ed9cb512c40337

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 42KB - Virtual size: 42KB

.data Size: 8KB - Virtual size: 17KB

.pdata Size: 8KB - Virtual size: 7KB

.rsrc Size: 162KB - Virtual size: 161KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 42KB - Virtual size: 42KB

.data
Size: 8KB - Virtual size: 17KB

.pdata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 162KB - Virtual size: 161KB

.reloc
Size: 4KB - Virtual size: 3KB