79a89b67cbd88d2315cb4d4cf7130391648224fa1163f98f1d1808d66416d9e4

Sharing

Copy URL Twitter E-mail

General

Target

79a89b67cbd88d2315cb4d4cf7130391648224fa1163f98f1d1808d66416d9e4
Size

52KB
MD5

61e0ec486468d42c1ff90272eecb47b9
SHA1

cf423e2a269d882067894ba70be56ac060fe49f0
SHA256

79a89b67cbd88d2315cb4d4cf7130391648224fa1163f98f1d1808d66416d9e4
SHA512

9f4b48a9e237751dfc10c9e0528990a48eeb0c84facae73afbfe4055c72f359e1d10bccf1986e23f307f3c6b2fbadcfc6983d9c7f275c24db0df5e57a5a7dabe
SSDEEP

768:24SyBSz0j6+cuR39ScwSVgVkiaNiJO0VtC446+emC:Wy4Y9ZVVgWi1JNtC44lC

Score

N/A

Malware Config

Signatures

Files

79a89b67cbd88d2315cb4d4cf7130391648224fa1163f98f1d1808d66416d9e4
.dll windows x86

a8b8c0cc5ade3e21a352b41960b23cad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

zprotectsdk

ord15
ord7
ord8
ord20
ord11
ord9
ord3
ord17
ord14
ord13
ord18
ord12
ord21
ord10
ord16
ord2
ord1
ord6
ord4
ord5
ord19

kernel32

GetStartupInfoA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
MultiByteToWideChar
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP

Exports

Exports

ZP_CRC32
ZP_CloseFileMapping
ZP_DES128
ZP_FreeResources
ZP_GetExecutionTime
ZP_GetHardwareIDStr
ZP_GetHomePageStr
ZP_GetKeyBuffer
ZP_GetKeyCustomInt
ZP_GetKeyCustomStr
ZP_GetTrialDate
ZP_GetTrialDateLeft
ZP_GetTrialDays
ZP_GetTrialDaysLeft
ZP_GetTrialTimes
ZP_GetTrialTimesLeft
ZP_GetUserName
ZP_GetWaterMarkStr
ZP_LoadResources
ZP_MD5
ZP_OpenReadOnlyFileMapping

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8b8c0cc5ade3e21a352b41960b23cad

Headers

File Characteristics

Imports

zprotectsdk

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB