d30d7676a3b4c91b77d403f81748ebf6b8824749db5f860e114a8a204bca5b8f[.]zip

General

Target

d30d7676a3b4c91b77d403f81748ebf6b8824749db5f860e114a8a204bca5b8f.zip
Size

617KB
MD5

9d0b7ad2b6f42b8dfa5fbac0756334ed
SHA1

b806c1c53111d75034d84c9b60a65c4cd1f82601
SHA256

53b90b1b2541e6639813a6f784f023a89c02ec6f3c920743647fcab13d164498
SHA512

d692c96f163fa8713bc7993f9c8a331bfa296f1e7ed874f38f8549746cd2fc447e91e34c3c7ba6068b2204777e759c90e3f815ecc9fec9e4dadbacb7b333c0a0
SSDEEP

12288:ZOLgemhomQUyzb0wz+ikCh/LAlfIi37XgyNgBju3h6gQR+ENjrQMairD:Eo9A0wz+vCxLSlrXgiCRNNfxa+D

Score

N/A

d30d7676a3b4c91b77d403f81748ebf6b8824749db5f860e114a8a204bca5b8f.zip
.zip

Password: infected
d30d7676a3b4c91b77d403f81748ebf6b8824749db5f860e114a8a204bca5b8f.exe
.exe windows x86

Password: infected

f400a8c725e9bcee856360087d72fec3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

netapi32

NetUserAdd

ntdll

RtlGetVersion

user32

GetDC

gdi32

BitBlt

advapi32

FreeSid

shell32

ShellExecuteW

ole32

CoTaskMemFree

bcrypt

BCryptGenRandom

vcruntime140

wcsstr

api-ms-win-crt-string-l1-1-0

wmemcpy_s

api-ms-win-crt-runtime-l1-1-0

exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.MPRESS1
Size: 609KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE