Sletmains[.]zip

Sharing

Copy URL Twitter E-mail

Reason

scan timeout

General

Target

Sletmains.zip
Size

1.2MB
MD5

0bbf331ce8459dcf9d394d4bcdb5d020
SHA1

8cbbd541f00b9aa440e9ac398af649241ac7249b
SHA256

a32abe487c84e06d068345e62b4468b6b66e0d0f72a09848f7de6f10e1a04927
SHA512

74ffd559cb7d055b2dd04d3f5d6e9f8134f5e09fcc04b6024ae6f006cef50de1050dc7fba903607380408a5ba201ab50b9b3c38f69130e6659e9cfec6ea756c3
SSDEEP

12288:LoYxTbn0wqkbUmZ4e0lct4SrAZdhj9UW/Z8:Lfb0wqkbUmMlct4LZvv/Z8

Score

N/A

Malware Config

Signatures

Files

Sletmains.zip
.zip
Sletmains.exe
.exe windows x64

3231e14e02ce5df565268d7f969ac48c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ole32

CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoTaskMemFree

ntdll

RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
RtlVirtualUnwind
NtQuerySystemInformation
RtlGetVersion
NtQueryInformationProcess
RtlCaptureContext

advapi32

OpenProcessToken
GetTokenInformation
LookupAccountSidW
SystemFunction036

iphlpapi

GetIfTable2
FreeMibTable
GetIfEntry2

kernel32

IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryExW
EncodePointer
RaiseException
SetUnhandledExceptionFilter
TerminateProcess
CloseHandle
lstrlenW
GlobalLock
GlobalUnlock
GlobalAlloc
GetComputerNameExW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleHandleA
CopyFileExW
GetLastError
SetLastError
GetFinalPathNameByHandleW
HeapReAlloc
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
HeapAlloc
GetProcessHeap
HeapFree
WakeAllConditionVariable
SwitchToThread
SleepConditionVariableSRW
WakeConditionVariable
GetSystemInfo
GetProcAddress
GetSystemTimeAsFileTime
TryAcquireSRWLockExclusive
GetStdHandle
GetConsoleMode
WaitForSingleObject
WriteConsoleW
Sleep
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetCurrentProcess
ReleaseMutex
GetEnvironmentVariableW
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
CreateFileW
GetFullPathNameW
CreateDirectoryW
GetFileInformationByHandle
DeviceIoControl
FindFirstFileW
FindClose
CreateThread
ExitProcess
GetCurrentDirectoryW
AcquireSRWLockShared
ReleaseSRWLockShared
OpenProcess
ReadProcessMemory
GetProcessTimes
GetSystemTimes
GetProcessIoCounters
LocalFree
VirtualQueryEx
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetTickCount64
GetLogicalDrives
GlobalMemoryStatusEx
GetExitCodeProcess
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
DeleteCriticalSection

netapi32

NetUserEnum
NetUserGetLocalGroups
NetApiBufferFree

oleaut32

SafeArrayGetLBound
SysFreeString
VariantClear
SafeArrayDestroy
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SafeArrayGetUBound
SafeArrayAccessData

pdh

PdhAddEnglishCounterW
PdhCollectQueryData
PdhOpenQueryA
PdhRemoveCounter
PdhGetFormattedCounterValue
PdhCloseQuery

powrprof

CallNtPowerInformation

psapi

GetPerformanceInfo
GetModuleFileNameExW

secur32

LsaGetLogonSessionData
LsaFreeReturnBuffer
LsaEnumerateLogonSessions

shell32

CommandLineToArgvW
ShellExecuteExW
SHGetKnownFolderPath

user32

CloseClipboard
GetClipboardData
EmptyClipboard
OpenClipboard
RegisterClassExA
CreateWindowExA
AddClipboardFormatListener
GetMessageA
DispatchMessageA
RemoveClipboardFormatListener
PostQuitMessage
DefWindowProcA
SetClipboardData

bcrypt

BCryptGenRandom

api-ms-win-crt-string-l1-1-0

wcsncmp
strcpy_s
wcslen
strlen

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
exit
_initialize_narrow_environment
_initterm_e
_get_initial_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_configure_narrow_argv
abort
_exit
_set_app_type
_initterm
_seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc
calloc

Sections

.text
Size: 509KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 671.8MB - Virtual size: 671.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

3231e14e02ce5df565268d7f969ac48c

Headers

DLL Characteristics

File Characteristics

Imports

ole32

ntdll

advapi32

iphlpapi

kernel32

netapi32

oleaut32

pdh

powrprof

psapi

secur32

shell32

user32

bcrypt

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 509KB - Virtual size: 508KB

.rdata Size: 671.8MB - Virtual size: 671.8MB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 19KB - Virtual size: 18KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 509KB - Virtual size: 508KB

.rdata
Size: 671.8MB - Virtual size: 671.8MB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 19KB - Virtual size: 18KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 15KB - Virtual size: 14KB