c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603.zip
Size

197KB
MD5

61c2e108b05065eea4c8aefd97abc819
SHA1

9af647a4d7ec63b8b1ae4c5cb4b265d2b4b3a856
SHA256

cf1b7da39c0117d148cabd7433a55a4ac820d643a6a3fb7d1d978c67a219d2d9
SHA512

27d86632b64fd151c5ac8c0e0720a47116a3396db37852e177b35a5ccf967dc33155e39e4dc9e19a4dcf67efd0f5b264958fcecdff00a4afb466942d491a8dae
SSDEEP

3072:4UpfmTCU/vlNzz+DIbUU0ySqJ61iSgCVm9+5dH0h20tIDO4s5PFrRtej4SH4+4h5:4U+pEI5P4VsqZY2mIK4SRtesy4+4/

Score

N/A

Malware Config

Signatures

Files

c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603.zip
.zip

Password: infected
c242969d68b39199fa21ec075493f62f0cc69384f4847759f904031cf217a603.exe
.exe windows x86

2abc882d899e2b43011c6fa1977c4a07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWait
IsBadStringPtrW
FindResourceExW
GlobalAddAtomA
EndUpdateResourceW
InterlockedIncrement
GetCurrentProcess
SetComputerNameW
FreeEnvironmentStringsA
GetModuleHandleW
EnumCalendarInfoExW
GetProcessHeap
ReadConsoleW
FindActCtxSectionStringA
TlsSetValue
SetSystemTimeAdjustment
GetSystemWindowsDirectoryA
LeaveCriticalSection
GetFileAttributesA
GetConsoleAliasW
GetGeoInfoA
MultiByteToWideChar
FlushInstructionCache
GetProcAddress
VirtualAlloc
LoadLibraryA
OpenWaitableTimerW
DnsHostnameToComputerNameA
SetCommMask
SetConsoleCursorInfo
lstrcmpiW
BuildCommDCBA
EnumDateFormatsW
GetFileAttributesExW
GetTempPathA
OpenFileMappingA
GetConsoleSelectionInfo
LCMapStringW
CreateFileA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
WideCharToMultiByte
InterlockedDecrement
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
TerminateProcess
IsDebuggerPresent
ExitProcess
GetStartupInfoW
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
GetStringTypeW
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetLocaleInfoA
GetModuleHandleA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers

user32

GetDC

ole32

CoRegisterMallocSpy

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

2abc882d899e2b43011c6fa1977c4a07

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

winhttp

msimg32

Sections

.text Size: 81KB - Virtual size: 80KB

.data Size: 94KB - Virtual size: 107KB

.rsrc Size: 101KB - Virtual size: 101KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 81KB - Virtual size: 80KB

.data
Size: 94KB - Virtual size: 107KB

.rsrc
Size: 101KB - Virtual size: 101KB

.reloc
Size: 8KB - Virtual size: 7KB