6d3fa64683d05b74fbe4f61d021051fe545048e2a02b49fdd3f7e77a7124c1c5[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

6d3fa64683d05b74fbe4f61d021051fe545048e2a02b49fdd3f7e77a7124c1c5.zip
Size

17KB
MD5

a2184d27bac9ef116854d5287a5c3c38
SHA1

1838d9c338e2b85e2bdfb1272548336279442b98
SHA256

6d3fa64683d05b74fbe4f61d021051fe545048e2a02b49fdd3f7e77a7124c1c5
SHA512

1f396ecf1028a0756dd334a48816ef0a7821a2271a8b7618422a14a4cb2af8571106da05a35b8fa20f78f3a2b9804d3f915c9e56cdf6e6fa14af5b037ea25944
SSDEEP

384:n1uJhGaXKtiyibG4j6G7hT3pjCA024fyTIaonFSSvmxqrOuwrM2j:n1uJkaXKtKbsGNT3ptt4CdqrOt

Score

1^/10

Malware Config

Signatures

Files

6d3fa64683d05b74fbe4f61d021051fe545048e2a02b49fdd3f7e77a7124c1c5.zip
.zip
hora.zip
.zip
hora.scr
.exe windows x86

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
CreateDirectoryA
GetPrivateProfileStructW
WaitForSingleObject
WriteConsoleA
GetConsoleTitleA
UpdateResourceA
GetTimeFormatA
LoadLibraryA
DeviceIoControl
GetNumberFormatW
GetCurrentDirectoryA
CloseHandle
SetFilePointer
GetTickCount
GetBinaryTypeA
SetCurrentDirectoryW
lstrcpynA
CompareStringA
GetProcAddress
CreateNamedPipeA
GetProcessHeap
GetDateFormatA
GetSystemTimeAsFileTime
GetComputerNameA
SetEnvironmentVariableW
GetCurrentProcess
GetPrivateProfileIntA
HeapValidate
GetConsoleAliasW
GetProcessId

nddeapi

NDdeShareEnumA
NDdeShareGetInfoA
NDdeShareDelA
NDdeShareSetInfoA
NDdeShareAddA

shlwapi

UrlIsOpaqueA
UrlIsNoHistoryW
UrlGetPartA
UrlIsA
PathCompactPathA
UrlGetLocationA
UrlCreateFromPathA
UrlHashA
PathCommonPrefixA
UrlCompareA
UrlEscapeA
UrlUnescapeA
PathCombineA

wtsapi32

WTSEnumerateServersA
WTSUnRegisterSessionNotification
WTSFreeMemory
WTSVirtualChannelRead
WTSWaitSystemEvent
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSSetUserConfigW
WTSEnumerateProcessesA
WTSEnumerateSessionsW
WTSSendMessageA
WTSVirtualChannelWrite
WTSVirtualChannelPurgeInput
WTSQueryUserToken
WTSQuerySessionInformationA
WTSSetSessionInformationW
WTSVirtualChannelQuery

msimg32

DllInitialize
AlphaBlend
GradientFill
TransparentBlt
vSetDdrawflag

user32

wsprintfA
GetWindowTextA
DrawIcon
DialogBoxParamA
IsZoomed
SetCursorPos
GetMessageA
PeekMessageA
CreateWindowExA
GetPropA
GetWindowLongA
PostMessageA
IsWindow
GetCaretPos
IsCharLowerW
DispatchMessageA
CharToOemA

modemui

CountryRunOnce
InvokeControlPanel

certcli

CACloseCA
CACloseCertType
CAEnumFirstCA
CAEnumNextCA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

nddeapi

shlwapi

wtsapi32

msimg32

user32

modemui

certcli

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 626B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 626B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB