beafeae4fa11d40d69987a45a5c654f67dbc3793f1088746771e61a2256b88e3[.]zip

General

Target

beafeae4fa11d40d69987a45a5c654f67dbc3793f1088746771e61a2256b88e3.zip
Size

288KB
MD5

dfd6d4760c7c59003b032821eccd1ca6
SHA1

94baa6f68c273da852e7bbb91c0e0a4198b2c4a1
SHA256

b3fb4d4cc5326e027d868db7fc58e93b897db4b3fc498588117b0df3b5ffbaee
SHA512

4f1aff8c914ca9fe59f48d517a21c2908000251ccf770366db2834b574b0e55460cdeb8651d38db879f039dd56a4943f246e1dedcdc4972d4f291f71c96bc76c
SSDEEP

6144:ED3m3w5XB29W6IQUTIvlnbgcX8mRawXo1xKS3gjEoOl3Z:Um3w5x2E6SIvlamRhWxKS2ql3Z

Score

N/A

beafeae4fa11d40d69987a45a5c654f67dbc3793f1088746771e61a2256b88e3.zip
.zip

Password: infected
beafeae4fa11d40d69987a45a5c654f67dbc3793f1088746771e61a2256b88e3.dll
.dll regsvr32 windows x86

Password: infected

b121f840f8c504d34a3856981e588e27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileSize
GetFileType
ReadFile
CloseHandle
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetCurrentThreadId
OpenThread
SuspendThread
MapViewOfFile
GetModuleFileNameA
CreateFileMappingA
CreateNamedPipeA
WaitNamedPipeA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ