cliente[.]zip | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

cliente.zip
Size

19.2MB
MD5

0556e50627259d2596982680f91388bf
SHA1

6763ff3ec641d04996e25487eaecc3f3063b67cc
SHA256

1ee3b3d74a7b349cbd8c6e8c6c269f1680ed62997bc455f11f575ea3f8e889ee
SHA512

2b12922c59b120a0eefe1731d03d4eb3f3a3ea21d6abcd6f357773dc81e6c8b17ac6a46073be597ef54d6560e6c3ae0c56cc50842eb7d029dcb7921300156941
SSDEEP

393216:P5EXwJbFtvUAcXxw7TY/Z8rfKzGRu/s4B4Vtl/xUzspvg7+TacOp:hEifvUfwwarfg/stVtfUgpa+G9

Score

1^/10

Malware Config

Signatures

Files

cliente.zip
.zip
g2m.dll
.dll windows x86

388d797239cdabfea737cc5393568a4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

advapi32

RegQueryValueExW
RegSetValueExW

user32

CharNextW
SetClassLongW
EnumDisplayMonitors
CharUpperBuffW

kernel32

GetVersion
GetProcAddress
GetVersionExW
GetVersion
Sleep
MulDiv
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

gdi32

UnrealizeObject

version

VerQueryValueW

netapi32

NetApiBufferFree

ole32

OleUninitialize

comctl32

InitializeFlatSB

msvcrt

memset

shell32

ShellExecuteW
SHGetSpecialFolderLocation

urlmon

HlinkNavigateString

winmm

timeGetTime

magnification

MagSetImageScalingCallback

wsock32

WSACleanup

Exports

Exports

TMethodImplementationIntercept
TMethodImplementationIntercept
__dbk_fcall_wrapper
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
dbkFCallWrapperAddr
dbkFCallWrapperAddr
g2mcomm_winmain

Sections

.text
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 32KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sYT
Size: - Virtual size: 53.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.3M|
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aS'
Size: 18.3MB - Virtual size: 18.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

388d797239cdabfea737cc5393568a4f

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

netapi32

ole32

comctl32

msvcrt

shell32

urlmon

winmm

magnification

wsock32

Exports

Exports

Sections

.text Size: - Virtual size: 4.2MB

.itext Size: - Virtual size: 17KB

.data Size: - Virtual size: 111KB

.bss Size: - Virtual size: 32KB

.idata Size: - Virtual size: 16KB

.didata Size: - Virtual size: 2KB

.edata Size: - Virtual size: 2KB

.rdata Size: - Virtual size: 68B

.sYT Size: - Virtual size: 53.8MB

.3M| Size: 3KB - Virtual size: 3KB

.aS' Size: 18.3MB - Virtual size: 18.3MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: - Virtual size: 4.2MB

.itext
Size: - Virtual size: 17KB

.data
Size: - Virtual size: 111KB

.bss
Size: - Virtual size: 32KB

.idata
Size: - Virtual size: 16KB

.didata
Size: - Virtual size: 2KB

.edata
Size: - Virtual size: 2KB

.rdata
Size: - Virtual size: 68B

.sYT
Size: - Virtual size: 53.8MB

.3M|
Size: 3KB - Virtual size: 3KB

.aS'
Size: 18.3MB - Virtual size: 18.3MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 9KB - Virtual size: 9KB