62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.zip
- SHA256 ec0e781be8228d0902e529727f4fdf82d2945e9d948fad0ea5efb67e4149bca2
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
General
- Target 62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.zip
- Size 290KB
- Sample230208-lxyryaaa82
- SHA256 ec0e781be8228d0902e529727f4fdf82d2945e9d948fad0ea5efb67e4149bca2
- MD5 1cd0b08318c2ca6a455009d7385e2449
- SHA1 855dbbc1c4dfbf4f26c8e6e449148326fbfd4d5f
- SHA512 666e25208ef871ec708716a6c603d8485c0f79d6cbd04353ace84e104e5fe78b8a9ad9dc777072ee3e6f69c3933e372fb07904810f0982a4f7d5582bc2e347c4
- SSDEEP 6144:ZpsFUzDUdBeAFtV+n27+whm7G7P7GREepkSr9/iYLdOJlscom7sTxoei:ZpssDUdBegtV+n2iwYKSRvl//LdOJycH
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.zip.zip 290KB
-
62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.dll.dll 514KB
62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6.dll
- IMPHASH 8ccc04f5c918917cde66a48ea1065169
- SHA256 62b4e33474fa6ef9e22b8f22b1918315e6ecb6d18066d3b1e7a29181d29323f6
- MD5 5397887cac09d8d9f50871894ada5dfb
- SHA1 67a4b778ddc036e85d64585965f2cb2fb9bc699d
- SHA512 55a5655e5d7ed6f84ad024eb1b58c0ffc31e957c16782acd49b3cc1a3b0515ff7e742c1247fd2dae9ebe11989f21bdc4c08a8dd9b7c2b4db51bfafb194a675f7
- SSDEEP 6144:LVvauc175GwSlLaD0adqHQFHQFHQFHQFHQZcH+J8aLi/ZnZLtO/ydWp3kklPSiNO:LViuc175Gw/DtcUKmvJSYCQqTI
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Minor OS version
Major OS version
Entry point
24732
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
gdiplus
GdipDrawImageI
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipDrawString
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipFillRectangleI
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRectI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetVisibleClipBoundsI
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusStartup
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
kernel32
SetStdHandle
SetFilePointer
GetModuleHandleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
GetTickCount
CreateThread
GetCommandLineW
GetVersionExA
CreateToolhelp32Snapshot
GetLastError
GetCurrentProcessId
Process32First
Process32Next
CloseHandle
ExitProcess
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetThreadExecutionState
DeviceIoControl
FormatMessageW
Sleep
CreateFileW
GetFileInformationByHandle
FlushFileBuffers
GetSystemTime
SystemTimeToFileTime
WriteConsoleA
WriteConsoleW
FindClose
GetSystemTimeAsFileTime
GetFileAttributesExW
GetCurrentProcess
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetDiskFreeSpaceExW
GetDriveTypeW
GetVolumeInformationW
FindFirstVolumeMountPointW
FindNextVolumeMountPointW
FindVolumeMountPointClose
GetLogicalDriveStringsW
GetModuleFileNameW
GetShortPathNameW
GetLongPathNameW
DosDateTimeToFileTime
LocalFileTimeToFileTime
ReadFile
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
RtlUnwind
HeapDestroy
HeapCreate
VirtualAlloc
VirtualFree
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FindFirstFileW
GetConsoleOutputCP
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
CreateFileA
CompareStringA
CompareStringW
FindNextFileW
GetModuleHandleW
GetProcAddress
HeapAlloc
HeapReAlloc
HeapFree
GetTimeZoneInformation
DeleteFileW
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
WideCharToMultiByte
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
user32
DefWindowProcA
EndPaint
BeginPaint
InvalidateRect
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
UpdateWindow
ShowWindow
CreateWindowExW
MessageBoxW
RegisterClassExA
LoadStringA
LoadIconA
LoadCursorA
gdi32
GetStockObject
advapi32
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueA
shell32
CommandLineToArgvW
?AddArrayString@JKDefragLib@@QAEPAPA_WPAPA_WPA_W@Z
?CallShowStatus@JKDefragLib@@QAEXPAUDefragDataStruct@@HH@Z
?ColorizeItem@JKDefragLib@@QAEXPAUDefragDataStruct@@PAUItemStruct@@_K2H@Z
?DeleteItemTree@JKDefragLib@@QAEXPAUItemStruct@@@Z
?FragmentCount@JKDefragLib@@QAEHPAUItemStruct@@@Z
?GetItemLcn@JKDefragLib@@QAE_KPAUItemStruct@@@Z
?GetLongPath@JKDefragLib@@QAEPA_WPAUDefragDataStruct@@PAUItemStruct@@@Z
?GetShortPath@JKDefragLib@@QAEPA_WPAUDefragDataStruct@@PAUItemStruct@@@Z
?IsFragmented@JKDefragLib@@QAEHPAUItemStruct@@_K1@Z
?MatchMask@JKDefragLib@@QAEHPA_W0@Z
?RunJkDefrag@JKDefragLib@@QAEXPA_WHHNPAPA_W1PAH1@Z
?ShowHex@JKDefragLib@@QAEXPAUDefragDataStruct@@PAE_K@Z
?SlowDown@JKDefragLib@@QAEXPAUDefragDataStruct@@@Z
?StopJkDefrag@JKDefragLib@@QAEXPAHH@Z
?SystemErrorStr@JKDefragLib@@QAEXKPA_WI@Z
?TreeBiggest@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?TreeDetach@JKDefragLib@@QAEXPAUDefragDataStruct@@PAUItemStruct@@@Z
?TreeFirst@JKDefragLib@@QAEPAUItemStruct@@PAU2@H@Z
?TreeInsert@JKDefragLib@@QAEXPAUDefragDataStruct@@PAUItemStruct@@@Z
?TreeNext@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?TreeNextPrev@JKDefragLib@@QAEPAUItemStruct@@PAU2@H@Z
?TreePrev@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?TreeSmallest@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?stristr@JKDefragLib@@QAEPADPAD0@Z
?stristrW@JKDefragLib@@QAEPA_WPA_W0@Z
DllRegisterServer
Name
.text
Size
257KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
174KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ