mzvgmp_unpacked[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

mzvgmp_unpacked.exe
Size

1.1MB
MD5

1d472f5e68f1fa8a0c2187cec39b5307
SHA1

539d9745b92fd398f381b68ba778ce81f6b59db6
SHA256

e86bf6126811ab1eb8d9302e429c43978fa579cf35a7f64cc2fc4fdf4a320755
SHA512

f7b4a3a0657381d6f969f6a358fe25a29921da68185d913717b05d23b85414534ae56dec704b6958777ddc124348f4baaed911784d1829e8630b52900637843f
SSDEEP

24576:sM29EB2q+V9wxZCtWSrUTGeWHR++AJyp8anrgOz8Ve9kSNDztXes2oB:gaTJIWSrUTSx1NlzIykAXeE

Score

N/A

Malware Config

Signatures

Files

mzvgmp_unpacked.exe
.exe windows x86

62495a2c6fb17ab2d1086e4f2fa02b0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile
GetModuleHandleW
LoadLibraryW
GetCurrentProcess
QueryPerformanceFrequency
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
Process32NextW
SetLastError
GetTickCount64
CheckRemoteDebuggerPresent
IsDebuggerPresent
GetModuleFileNameW
GetComputerNameW
GetCommandLineW

ntdll

NtAllocateVirtualMemory
NtFreeVirtualMemory
NtProtectVirtualMemory
NtClose
LdrGetDllHandleEx
RtlImageDirectoryEntryToData
NtIsProcessInJob

advapi32

GetUserNameW

wininet

InternetOpenW
InternetOpenUrlW
InternetCloseHandle

shell32

CommandLineToArgvW

kernelbase

FlsAlloc
FlsSetValue
InitializeCriticalSectionEx

Sections

.text
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62495a2c6fb17ab2d1086e4f2fa02b0d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

advapi32

wininet

shell32

kernelbase

Sections

.text Size: 800KB - Virtual size: 800KB

.data Size: 348KB - Virtual size: 348KB

.reloc Size: 24KB - Virtual size: 24KB

.text
Size: 800KB - Virtual size: 800KB

.data
Size: 348KB - Virtual size: 348KB

.reloc
Size: 24KB - Virtual size: 24KB