508f5b8a7d7ee6f698680cb0f905002d24ad4af4d756e3bdfb65d6038d779954[.]zip

General

Target

508f5b8a7d7ee6f698680cb0f905002d24ad4af4d756e3bdfb65d6038d779954.zip
Size

17KB
MD5

f252fd2efa1af2430c6f4e42200a2c83
SHA1

879f7ef2d2c6830dc7a6729161b4282be905972e
SHA256

4d5b000b1a7107234b673545b7cb86747a9641362fba29fa5faad1d68602c9dd
SHA512

f0204a68b8b71880d97a91195511f5f98ce449b474d06cd8a6dcd588a8ddd716fe846fa1ff2e42a1af432c983ae64d5ab5b5d0ab5422fe3c8aa65fbd2ccded40
SSDEEP

384:9e3Ug6rqDmOmLMBz4Z0XdNXedjmJey8IZTlgcRD5su/WLQfA2K0b481PC:03p6rUHmLgz4Z03XYj505ML3Ob19C

Score

N/A

508f5b8a7d7ee6f698680cb0f905002d24ad4af4d756e3bdfb65d6038d779954.zip
.zip

Password: infected
508f5b8a7d7ee6f698680cb0f905002d24ad4af4d756e3bdfb65d6038d779954
.exe windows x86

0ba06ea2cbd25e090143657adaa29756

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
SetFilePointer
MoveFileExA
WaitForSingleObject
GetTickCount
WriteFile
Sleep
CreateProcessA
ReadFile
GetSystemDirectoryA
lstrcatA
EnterCriticalSection
GetModuleFileNameA
WinExec
CloseHandle
DeleteFileA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent

user32

CopyIcon
LoadCursorA
SetSystemCursor

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ