fa3d349119a0d23573d2f35770da77e082ce3434934a6e98ed43696b40043761.zip
- SHA256 d59f5dc7ef35bd41feec4f23bc7e8b24e447aa1537d6e622e94e5bbae5b8e151
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
HA8eIaalRc0917mRoS19ZSz9zXs883.dll
Resource
win7-20230220-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
HA8eIaalRc0917mRoS19ZSz9zXs883.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target fa3d349119a0d23573d2f35770da77e082ce3434934a6e98ed43696b40043761.zip
- Size 341KB
- Sample230308-mfs1ssfd65
- SHA256 d59f5dc7ef35bd41feec4f23bc7e8b24e447aa1537d6e622e94e5bbae5b8e151
- MD5 85c63ea1e55443439e7f31da8a6349d1
- SHA1 b6ed1b644c73a56addf7cd6acb1ba9d61c7a5c38
- SHA512 eda106ca2d1ed2ed7023ded19f6dcb1557cf76a85df1d34e55d39613b0503906c358c771a1639faf748d2685c4deb29641a7b38b96ff1663c302fe7a0a0eb932
- SSDEEP 6144:8ZbIVBg11DmvjJF1Zc/uJ+y/6uaVHRgS3QhoRfJ7egEF9JM2ecWrjlcJbFr:8SVu3DSjj19Jf6uaRRNAgnEl5z8mr
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
fa3d349119a0d23573d2f35770da77e082ce3434934a6e98ed43696b40043761.zip.zip 341KB
-
fa3d349119a0d23573d2f35770da77e082ce3434934a6e98ed43696b40043761.zip.zip 873KB
-
HA8eIaalRc0917mRoS19ZSz9zXs883.dll.dll 537.7MB
fa3d349119a0d23573d2f35770da77e082ce3434934a6e98ed43696b40043761.zip
- SHA256 fa3d349119a0d23573d2f35770da77e082ce3434934a6e98ed43696b40043761
- MD5 64048e240c1db85470fcab72ef05b1ae
- SHA1 85226cf76a1a6b72bbdc146f1a535fb1ba891c94
- SHA512 26db698eab69be2f4b080e0546fc94c4054635829f7f4d94d8e8896c76db2e662d2ef022116035eba7f5c72bd9e69c4cf530af5e1b9b6c5a82b55308dc858095
- SSDEEP 12288:74DKwKHCjAbD7j9kd1j89Gpm19Fkf7/sX:0evtlkdJe4m19Fgs
- MD5 SHA1 SHA512 SSDEEP
Password
infected
HA8eIaalRc0917mRoS19ZSz9zXs883.dll
- IMPHASH c73bbc818ceb2fafea2b25df17dec187
- SHA256 70e9d80b287cec24d97ec11b5bb9a27c70e1e65004c21ea03407ebeddf5ffc03
- MD5 dca356e2f18ac61da1a8df6d78b0186a
- SHA1 d7c0b08b86d62e9d7af12b53fcd3db61dfa18510
- SHA512 227748a690beb7987ccb5f1071b673eadf03d7858c533a3af438540012e2f28ec90dff2917e25791cffb7041e2340a18126765b67d9a8aa51c1ba7fb767d0d9f
- SSDEEP 24576:4E4cLCJMj2C8c3wCRSNWiy/eK5xDegO82/gkU8jG:4GLCJMjl8c3wKwKXeZ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Minor OS version
Major OS version
Entry point
4864
Magic Number
523
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx
user32
EnumThreadWindows
MessageBoxA
wsprintfA
DllRegisterServer
__CPPdebugHook
Name
.text
Size
305KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rodata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
57KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
105B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
175KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ