70a3b6b361021c1f0a93c8251b89529e8f66e66aab79cb3ea7710c7cf8bca30c.zip
- SHA256 53b9929c0c5762302e418c75d6786527e77d900b91584999925e8707a828b0af
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
3Jmim1.dll
Resource
win7-20230220-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
3Jmim1.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target 70a3b6b361021c1f0a93c8251b89529e8f66e66aab79cb3ea7710c7cf8bca30c.zip
- Size 341KB
- Sample230308-mftmbseh6w
- SHA256 53b9929c0c5762302e418c75d6786527e77d900b91584999925e8707a828b0af
- MD5 55ff8107693223e60d32175174c54805
- SHA1 60a02a0196cb530a8d2629bc7752c0b7daf3388f
- SHA512 8648ee24718eb83ff9b91b0d8d15b9ad41e1f8428bb59e1e3231d457c1e6e621f0efed5039dfbae4dd05c0c840201d63debd57030643954f50b7c5f50041699b
- SSDEEP 6144:CxTyCFL57CyWqVye1UMLxiqSh6VZTGnCp/ys6FtSck5HY35:i/FtXryMLxiqx7dihk5435
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
70a3b6b361021c1f0a93c8251b89529e8f66e66aab79cb3ea7710c7cf8bca30c.zip.zip 341KB
-
70a3b6b361021c1f0a93c8251b89529e8f66e66aab79cb3ea7710c7cf8bca30c.zip.zip 880KB
-
3Jmim1.dll.dll 545.7MB
70a3b6b361021c1f0a93c8251b89529e8f66e66aab79cb3ea7710c7cf8bca30c.zip
- SHA256 70a3b6b361021c1f0a93c8251b89529e8f66e66aab79cb3ea7710c7cf8bca30c
- MD5 fdff33dfc9218080b5ba5e2b9258c6e2
- SHA1 7121a4de1ba219e84b2dceef6e114ebb5db2345a
- SHA512 a4826b63f7b95187943367e3007d7daad46b35211407481d0710e5607e3118d13c9039b02bab0cc0a03f91029db1420b89b996e6d99b71dc2a440c793c5b279c
- SSDEEP 12288:s4DKwKHCjAbD7j9kd1j89Gpm19Fkf7/s+:LevtlkdJe4m19FgX
- MD5 SHA1 SHA512 SSDEEP
Password
infected
3Jmim1.dll
- IMPHASH c73bbc818ceb2fafea2b25df17dec187
- SHA256 fdc4a380cc9b93b335a365e949e4b0498f6bcec5119ea6b1f435555478bebece
- MD5 103a6dcd4b7afcc0ef933dc4d62d05c9
- SHA1 b4d249b5578c147c1710632a676bfaa78b56962f
- SHA512 66bc950c361fee61475319c10c6e41144d62e271db8b0787746c1f1d4fa2096b349b4aff773d7ad55d718d9426410f86589139112b6131ab0746b519955e9446
- SSDEEP 24576:4E4cLCJMj2C8c3wCRSNWiy/eK5xDegO82/gkU8jG:4GLCJMjl8c3wKwKXeZ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Minor OS version
Major OS version
Entry point
4864
Magic Number
523
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx
user32
EnumThreadWindows
MessageBoxA
wsprintfA
DllRegisterServer
__CPPdebugHook
Name
.text
Size
305KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rodata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
57KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
105B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
175KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ