Draft copy (2)[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Draft copy (2).zip
Size 265KB
Sample230211-npfbqsba92
SHA256 25fa9d230c114a64181127df03fb38e48e1a0bb995149877e56b8f7f8d72675a
MD5 ac0ac455416e7ae81e77fc98d070fc57
SHA1 f12e7d3f5ba129bbceab12310faafe6441a874bb
SHA512 4d4e4ae61c33579b1deb78da5d58bb76e9250331c8587fafca6dc20cb914dcb0135b5b7157b5f5b68db4fa48045362b6c788222a084045bcbb9e32b5d190a0b7
SSDEEP 6144:vpU8PLkt/zIKzH/OToOR9BnqN7R5yXu0tDaSK5r1Ppkbcp5SAM:lPLkVIqfEoOR95qRRKRQSK5pPscpPM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

Draft copy (2).zip

.zip 265KB
Draft copy (2).exe

.exe 279KB

Draft copy (2).zip

SHA256 25fa9d230c114a64181127df03fb38e48e1a0bb995149877e56b8f7f8d72675a
MD5 ac0ac455416e7ae81e77fc98d070fc57
SHA1 f12e7d3f5ba129bbceab12310faafe6441a874bb
SHA512 4d4e4ae61c33579b1deb78da5d58bb76e9250331c8587fafca6dc20cb914dcb0135b5b7157b5f5b68db4fa48045362b6c788222a084045bcbb9e32b5d190a0b7
SSDEEP 6144:vpU8PLkt/zIKzH/OToOR9BnqN7R5yXu0tDaSK5r1Ppkbcp5SAM:lPLkVIqfEoOR95qRRKRQSK5pPscpPM
MD5 SHA1 SHA512 SSDEEP

Draft copy (2).exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 c03d796c8b75c36e92aa53d1fb21d89fb0fc6aa57df540ca0074c43661a6cec0
MD5 081e782e1fa08dc8aba10cb884c28dfd
SHA1 c29170608c293c89db0fdd51d5e79bbd6c90e644
SHA512 5445a8dc70c27874e9369c059a0675e17c45348175971d63888560942800b8b4e48749de838ebe3cefeb355cacfa6230bd65ae9ccaa684d9674704dd32c1e3b5
SSDEEP 6144:DYa6gaQ4zIKz5/OTQOf9BDqN7V5yZuwtFqSK5R1Zpkbcp/Srx:DY+aJIqdEQOf9ZqRVuDiSK5LZscpsx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13888

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW