8615676623[.]zip

General

Target

8615676623.zip
Size

19KB
MD5

5b3a72db8d712114240422a31fc0dbc1
SHA1

ba45ca77b00229c6231af9e3f894f1cec28e7536
SHA256

00157dd599b4dc776d6b2332d4d7cc50b694a338d53c4b858cf8accccdae3b17
SHA512

3795f95077a855354aaf04f484d830d5618372693c6fbc39f24ab5494a0b58576a8d909f2982d3e0ec11e4a6d6403f4e92cc5a5f2ef15d886580bfd7f5f71aea
SSDEEP

384:ourQ/LqKERW/HLAheNSnSxcr30WrTpoWDpTVlJL2QuVc+13CFT:lAu4AaAdtB9uJ13CFT

Score

N/A

Malware Config

Signatures

Files

8615676623.zip
.zip

Password: infected
5e2191c65ec5d83d6ea61e19bb8a7d07a4b82af41091005936ed2d5046f33421
.exe windows x86

5bb5e08ca7243656692dd34f7ceb17f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_XcptFilter
_controlfp
_except_handler3
_exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit

user32

SendMessageA
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
RegisterClassExA
LoadStringA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA

kernel32

GetModuleHandleA
LoadLibraryA
GetTempPathA
CreateFileW
lstrcatA
GetFileType
CloseHandle
GetFileSize
GetStartupInfoA
DeleteFileW
lstrcpynA

gdi32

CreateFontIndirectA

comctl32

InitCommonControlsEx

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.l2
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

5bb5e08ca7243656692dd34f7ceb17f5

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

gdi32

comctl32

Sections

.text Size: 6KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 16KB

.aspack Size: 15KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

.sxdata Size: 2KB - Virtual size: 4KB

.l2 Size: 12KB - Virtual size: 16KB

.text
Size: 6KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 16KB

.aspack
Size: 15KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB

.sxdata
Size: 2KB - Virtual size: 4KB

.l2
Size: 12KB - Virtual size: 16KB