a3bad5dc407e91902f7f5f2b49f7e4cfa2d9387638723fbe7e94e0e93dce0f95[.]zip

Resubmissions

01/11/2022, 11:08

221101-m81w4sbca5 10

28/10/2022, 15:20

221028-sq511agder 10

Sharing

Copy URL Twitter E-mail

General

Target

a3bad5dc407e91902f7f5f2b49f7e4cfa2d9387638723fbe7e94e0e93dce0f95.zip
Size

7KB
MD5

73583b7bb0f1759674c792a8a0383140
SHA1

e0ffd1f22047394ef4a1f82fabc4b50673f843c7
SHA256

cd653e8f498ed4c005eef4d71498db063e7f4ffa75ed061a72707759989ec69d
SHA512

937e5f4b2149fe17e81045d03bc578da3af4a1f82ae7a774261db37f5ef0e0707a6ee4857e9ee9d8e8bdfb29ec1fb1ac1e77d6b92e494c961071a0e6036742aa
SSDEEP

192:zJDyn09Z3lYSuKPH12lyYbqL3ocjcuePgfXKpxzNUf5:zB9yKclyYbqL0u87xzNm5

Score

N/A

Malware Config

Signatures

Files

a3bad5dc407e91902f7f5f2b49f7e4cfa2d9387638723fbe7e94e0e93dce0f95.zip
.zip

Password: infected
a3bad5dc407e91902f7f5f2b49f7e4cfa2d9387638723fbe7e94e0e93dce0f95.exe
.exe windows x64

Password: infected

30ca5906db470fb16eb7f426ed719ecc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

iphlpapi

NotifyIpInterfaceChange

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualAlloc
VirtualProtect
VirtualQuery

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf

wininet

HttpAddRequestHeadersA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetQueryDataAvailable
InternetReadFile

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 480B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

30ca5906db470fb16eb7f426ed719ecc

Headers

DLL Characteristics

File Characteristics

Imports

iphlpapi

kernel32

msvcrt

wininet

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 4KB - Virtual size: 4KB

.eh_fram Size: 512B - Virtual size: 4B

.pdata Size: 1024B - Virtual size: 636B

.xdata Size: 1024B - Virtual size: 652B

.bss Size: - Virtual size: 480B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 128B

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 4KB - Virtual size: 4KB

.eh_fram
Size: 512B - Virtual size: 4B

.pdata
Size: 1024B - Virtual size: 636B

.xdata
Size: 1024B - Virtual size: 652B

.bss
Size: - Virtual size: 480B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 128B