AfO899
CYvxX
DrawThemeIcon
LHWo914
TJqi910
XULm3
Static task
static1
General
-
Target
file.zip
-
Size
342KB
-
MD5
f1a474fd33a2ffd77caef6de74d63904
-
SHA1
ef70da0dd873a8242eb31e684ecdd2157b047a3c
-
SHA256
30b46391587f0a09c02bef037f5d1fc8c7c9848428e38564c50ea7989b68050d
-
SHA512
997f74a4d3ba0f2fa9e6ef8c0b58f5bbe1cad32bc770e3f7c25d392df1fcb666e8794f6dc057fadb9a7828d0ccc23d7e1b3faa2e27849422e038c6e1987bffb0
-
SSDEEP
6144:dnr6jZX5XlHw5dwiUkdccmruy8lMymfD69EUVmk7onL5IeqV8SfhZX:dnuXdif5cdrzAMNfD6iUaL5PqPZX
Score
N/A
Malware Config
Signatures
Files
-
file.zip.zip
-
05.dll.dll windows x86
f5633f396eec7e92c6df8dee7361a7f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
WriteFile
CloseHandle
HeapCreate
TryEnterCriticalSection
CreateThread
ResumeThread
GetModuleFileNameA
GetCurrentProcessId
SetEndOfFile
CreateFileMappingA
MapViewOfFile
CreateNamedPipeA
CallNamedPipeA
ConnectNamedPipe
FreeEnvironmentStringsW
DeleteCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapAlloc
GetLastError
HeapFree
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryExW
LCMapStringW
GetStdHandle
GetFileType
GetStartupInfoW
SetLastError
GetCurrentThreadId
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
MultiByteToWideChar
GetCPInfo
WideCharToMultiByte
IsValidCodePage
GetACP
GetOEMCP
SetFilePointerEx
GetStringTypeW
ExitProcess
GetModuleHandleW
GetModuleHandleExW
ReadFile
ReadConsoleW
GetModuleFileNameW
CreateFileW
WriteConsoleW
DecodePointer
RaiseException
HeapSize
HeapReAlloc
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FindClose
FindFirstFileExW
FindNextFileW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
Exports
Exports
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 326KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
09241 Dec 01.lnk.lnk