ea6421c34815e256903e3663d949fb443618d6ecd623378b678d0def053a5d5e[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

ea6421c34815e256903e3663d949fb443618d6ecd623378b678d0def053a5d5e.zip
Size

253KB
MD5

e94e21bbb9a1488bb119b2ed4080fc9b
SHA1

2b66bb2c463ff3161742d39e732aa6b42d7053cc
SHA256

a691e66c15bcd6dbf7e49128efa1900dd975a6ff814d0e8df9734756d93863ad
SHA512

f8198245d2f1bac7fd73de35f0b17fbcc4ecfe7c5bbce480a7c81b495aa48aeaa49c47103fe138e4a1677dd8522014b4c3725b343b33196c43f6f6d7a173e10d
SSDEEP

6144:1c6WFA2TDIo59eaie1SyQG4ACM/Bjn+HYXtl/QsPQDi:1c7FzX5saBMGUMJjnKYdlYsMi

Score

N/A

Malware Config

Signatures

Files

ea6421c34815e256903e3663d949fb443618d6ecd623378b678d0def053a5d5e.zip
.zip

Password: threatbook
ea6421c34815e256903e3663d949fb443618d6ecd623378b678d0def053a5d5e
.exe windows x64

Password: threatbook

0535f333f36b6757cf898c9a33e6f595

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FindClose
CreateDirectoryA
lstrlenW
WideCharToMultiByte
Sleep
CreateEventA
GetLastError
LoadLibraryA
GetProcAddress
GetModuleFileNameA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateFileA
OpenEventA
FileTimeToLocalFileTime
SetFilePointer
CloseHandle
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
HeapFree
HeapQueryInformation
HeapReAlloc
HeapAlloc
HeapCreate
HeapSetInformation
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
FlsFree
FlsAlloc
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
LoadLibraryW
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
GetSystemInfo
VirtualAlloc
RtlPcToFileHeader
RaiseException
RtlUnwindEx
IsBadReadPtr
HeapValidate
HeapSize
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentThread
GetLocaleInfoA
GetOEMCP
GetCPInfo
GlobalFlags
GetFullPathNameA
FlushFileBuffers
GetCurrentProcess
SetEvent
lstrcmpW
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
lstrcmpA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
FindFirstFileA
TlsAlloc
InitializeCriticalSection
LocalAlloc
FreeLibrary
GetCurrentProcessId
CompareStringA
GetModuleFileNameW
GetModuleHandleW
GetAtomNameA
GlobalGetAtomNameA
GetModuleHandleA
FindNextFileA
SetLastError
MultiByteToWideChar
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenA
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FileTimeToSystemTime
SetFileTime
WriteFile
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile

user32

GetActiveWindow
ShowOwnedPopups
IsWindowVisible
InvalidateRect
BringWindowToTop
GetWindowDC
ClientToScreen
ValidateRect
RegisterWindowMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetClientRect
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
GetWindow
GetCapture
WinHelpA
TrackPopupMenu
GetDlgItem
GetKeyState
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetWindowLongPtrA
SetPropA
GetPropA
CallWindowProcA
SetWindowLongPtrA
RemovePropA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
OffsetRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
MessageBoxA
GetWindowLongA
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
PostMessageA
SendMessageA
IsWindow
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
LoadMenuA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
LoadBitmapA
GetSysColorBrush
PeekMessageA
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuItemID
GetDesktopWindow
LoadStringA
LoadAcceleratorsA
wsprintfA
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
IntersectRect
InflateRect
PtInRect
GetMessageA
TranslateAcceleratorA
TranslateMessage
SetForegroundWindow
GetForegroundWindow
DestroyMenu
SetWindowTextA
GetMenuCheckMarkDimensions
SetRectEmpty
SetCursor
GetClipboardFormatNameA
UnpackDDElParam
ReuseDDElParam
GetWindowTextA
ReleaseCapture

gdi32

GetDeviceCaps
GetObjectA
GetStockObject
GetObjectType
CreateSolidBrush
CreatePatternBrush
CreateFontIndirectA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
PtVisible
RectVisible
BitBlt
GetPixel
ExtTextOutA
GetTextExtentPoint32A
Escape
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
TextOutA
DeleteObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

OpenThreadToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetThreadToken
RevertToSelf

shell32

DragFinish
DragQueryFileA

ole32

StringFromCLSID
CoTaskMemFree

oleaut32

VariantChangeType
VariantClear
VariantInit

Sections

.text
Size: 513KB - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: threatbook

Password: threatbook

0535f333f36b6757cf898c9a33e6f595

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 513KB - Virtual size: 513KB

.rdata Size: 145KB - Virtual size: 145KB

.data Size: 11KB - Virtual size: 36KB

.pdata Size: 26KB - Virtual size: 25KB

.rsrc Size: 20KB - Virtual size: 24KB

.text
Size: 513KB - Virtual size: 513KB

.rdata
Size: 145KB - Virtual size: 145KB

.data
Size: 11KB - Virtual size: 36KB

.pdata
Size: 26KB - Virtual size: 25KB

.rsrc
Size: 20KB - Virtual size: 24KB