9034455763[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

9034455763.zip
Size

155KB
MD5

7b44c46b7628050782c3779584277ed3
SHA1

1203f6aaaa25ffba422829495c12a01e061b6643
SHA256

b7ca6dc640592f15ef089fa7e1234a51d498f95fc4c27808953749ab54debeb4
SHA512

bf309fb2e69bca3490b271a9c65e64738d96bbe9d64d866808b3307d8d3451f47774af09a461ff950dc4305678faacd127600773efe1274d2c7a572a4f184acf
SSDEEP

3072:OPMNyXmJIiQ0+yx0LeHn5ksc1QEhiZRHJsLS3FSYNejY6MznDaZWcTMZ61K:OPJXpn0+yxcE5ks9pRYAfeu7DaccTMZt

Score

1^/10

Malware Config

Signatures

Files

9034455763.zip
.zip

Password: infected
869b5ae14dc41ffa70c98167bd671e37c02855c6860eabcdc9948522b1cecd36
.exe windows x86

7c82320f530506c562c3d27e73b5e565

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsContentTypeA
PathRemoveBackslashW
StrCSpnA
StrIsIntlEqualW
StrRStrIA
UrlCreateFromPathA
UrlIsNoHistoryA

odbc32

ord86
ord256
ord41
ord60
ord217
ord35
ord236
ord45
ord47

rtutils

LogErrorW
MprSetupProtocolFree
RouterGetErrorStringW
TraceDeregisterExA
TraceDumpExW
TraceGetConsoleW
TracePrintfExW
TracePrintfW

ole32

HPALETTE_UserMarshal
OleCreateDefaultHandler
OleNoteObjectVisible
StgCreatePropStg
StgOpenStorage
StgOpenStorageOnILockBytes

msi

ord46
ord97
ord113
ord117
ord121
ord145
ord147

oleaut32

SafeArrayDestroyData
VarCyFromBool
VarI1FromR8
VarR4FromUI1
VarR8FromI2
VarUI4FromR8
VariantTimeToSystemTime

wininet

CreateUrlCacheContainerA
CreateUrlCacheContainerW
FreeUrlCacheSpaceA
GopherOpenFileA
InternetDial
ShowX509EncodedCertificate

kernel32

CloseHandle
CompareStringW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MulDiv
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrcpynW
lstrlenW

comdlg32

GetFileTitleW

advapi32

RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW

user32

CheckMenuItem
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
EnableMenuItem
GetClientRect
GetMenu
GetMessageW
GetMonitorInfoW
GetSystemMetrics
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
MonitorFromRect
PostQuitMessage
RegisterClassExW
RegisterWindowMessageW
SendMessageW
SetFocus
SetRect
SetWindowPos
ShowWindow
TranslateAcceleratorW
TranslateMessage
UpdateWindow
wsprintfW

shell32

DragAcceptFiles
DragFinish
DragQueryFileW

gdi32

CreateFontIndirectW

Sections

.text
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.voltbl
Size: 512B - Virtual size: 482B

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

7c82320f530506c562c3d27e73b5e565

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

odbc32

rtutils

ole32

msi

oleaut32

wininet

kernel32

comdlg32

advapi32

user32

shell32

gdi32

Sections

.text Size: 277KB - Virtual size: 277KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 2KB - Virtual size: 11KB

.00cfg Size: 512B - Virtual size: 12B

.voltbl Size: 512B - Virtual size: 482B

.rsrc Size: 512B - Virtual size: 424B

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 277KB - Virtual size: 277KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 2KB - Virtual size: 11KB

.00cfg
Size: 512B - Virtual size: 12B

.voltbl
Size: 512B - Virtual size: 482B

.rsrc
Size: 512B - Virtual size: 424B

.reloc
Size: 10KB - Virtual size: 10KB