fad14293c82af81c030ce802b3bba02f6c0ab78df25211797aef2309e9c559a1[.]zip

General

Target

fad14293c82af81c030ce802b3bba02f6c0ab78df25211797aef2309e9c559a1.zip
Size

263KB
MD5

e4bf7fe89f35a9cb5d1d94d2825f72f6
SHA1

853cabdba1b8a253d38c19b67f17ec263fcc4b77
SHA256

bfc414f2edb0e9ed9da9d4941c9d59b29f7ced24008cd2b0ed7aabff0e2aaeab
SHA512

3cf784d5dff8702cc18e7505e6c11e22df7c9918e8e23d4a4254969d3c766e86d5d57ed0afb582ac90c8166455f4c574ea56b64ad8af9bac43281df547896090
SSDEEP

6144:gDElnY5yrZsKPYvMGl+g0AQMjF2UejOpZrjQ9/nWuj:gDkY5uYkGwVAZj4fyA9/Wu

Score

N/A

Malware Config

Signatures

Files

fad14293c82af81c030ce802b3bba02f6c0ab78df25211797aef2309e9c559a1.zip
.zip

Password: infected
fad14293c82af81c030ce802b3bba02f6c0ab78df25211797aef2309e9c559a1
.exe windows x86

Password: infected

710ca4a102900e524415e4225f9181a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextW
CreateDesktopW
LoadBitmapW
GetClassLongA
GetMessageA
LoadStringW
wsprintfA
PeekMessageW
PostMessageA
InsertMenuW
DrawStateW
LoadCursorA
DialogBoxParamA
GetPropA
LoadMenuA
CharToOemA

crypt32

CryptFindOIDInfo
CertOpenStore
CryptProtectData
CertFindCTLInStore
CryptHashMessage
CertGetNameStringA
CryptMsgUpdate
CertCreateCRLContext
CryptSignMessage
CertFindExtension
CertDuplicateCTLContext
CertFreeCTLContext
CertDuplicateStore
CryptMemRealloc
CryptDecodeMessage

kernel32

LoadLibraryExA
GetProfileSectionW
GetConsoleAliasA
MoveFileExW
GetTempPathA
OpenSemaphoreW
MapViewOfFile
Heap32First
OpenWaitableTimerW
CreateFileMappingA
GetModuleHandleA
WaitForSingleObject
GetOEMCP
GetProcAddress
InitializeCriticalSection

certcli

CACloseCA
CAEnumNextCA
CACloseCertType
CADeleteCA
CAEnumFirstCA

shlwapi

PathIsURLA
PathAppendA
UrlGetLocationA
UrlCompareA
UrlHashA
PathIsRootA
UrlGetPartA
UrlCanonicalizeW
UrlIsNoHistoryA
PathCommonPrefixW
UrlCombineA
PathCombineW

advapi32

InitializeSid
RegLoadKeyA
LogonUserA
OpenEventLogA
RegEnumKeyA
RegCreateKeyExA
RegDeleteValueA
RegRestoreKeyA
CryptSignHashA
RegReplaceKeyA
ClearEventLogA

mprapi

MprAdminBufferFree
MprInfoBlockAdd
MprAdminConnectionEnum
MprInfoBlockFind

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_MEM_READ
fad14293c82af81c030ce802b3bba02f6c0ab78df25211797aef2309e9c559a1_dump_0x00F20000
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

710ca4a102900e524415e4225f9181a7

Headers

File Characteristics

Imports

user32

crypt32

kernel32

certcli

shlwapi

advapi32

mprapi

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 37KB - Virtual size: 37KB

.rsrc Size: 158KB - Virtual size: 158KB

Password: infected

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 163KB - Virtual size: 162KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 16KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 37KB - Virtual size: 37KB

.rsrc
Size: 158KB - Virtual size: 158KB

.text
Size: 163KB - Virtual size: 162KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 16KB

.reloc
Size: 15KB - Virtual size: 14KB