b3fd2051fc1b96c495d355db0d334436e1c6d4438cd0beab23a5b1cbca869fd2.zip
- SHA256 573d0c80a888dab82f236d454de45a1519858200edb96af8894869c6d9ec7dc8
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
VdaN1GI2TTwnq1xfcuZGiVPNHHbdxkEOc.dll
Resource
win7-20230220-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
VdaN1GI2TTwnq1xfcuZGiVPNHHbdxkEOc.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target b3fd2051fc1b96c495d355db0d334436e1c6d4438cd0beab23a5b1cbca869fd2.zip
- Size 341KB
- Sample230308-mfwrpafd69
- SHA256 573d0c80a888dab82f236d454de45a1519858200edb96af8894869c6d9ec7dc8
- MD5 a47bc4bdfcceb83dc5ae69c316f267b0
- SHA1 cd923b98d03ed0125b01f5451ab5c44c5e2e8e9e
- SHA512 05dab9b9b66de2fa9096e8d11e31c0c4f29352186a9e45d57b016145277c5636a4835021e76c6517eecfcd0b8e04bcd01591b496493b9761c4cfc0048803970c
- SSDEEP 6144:sp5IV0n8rQhaFPHsyKFKxsbZJNiZG23hQ7xYBR5KvmNbxr4LhuuX:o8scWFKxqYGSQ7xYBR5QgiLMK
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
b3fd2051fc1b96c495d355db0d334436e1c6d4438cd0beab23a5b1cbca869fd2.zip.zip 341KB
-
b3fd2051fc1b96c495d355db0d334436e1c6d4438cd0beab23a5b1cbca869fd2.zip.zip 866KB
-
VdaN1GI2TTwnq1xfcuZGiVPNHHbdxkEOc.dll.dll 530.7MB
b3fd2051fc1b96c495d355db0d334436e1c6d4438cd0beab23a5b1cbca869fd2.zip
- SHA256 b3fd2051fc1b96c495d355db0d334436e1c6d4438cd0beab23a5b1cbca869fd2
- MD5 c0b4c0730e1ff08fae1182cc75f4ec83
- SHA1 062cfa554c67dc961a65b20aa4d7a49a3bc2430b
- SHA512 1395b9a3880b749eea6f178c20f495130dd544e7accc0d0b313eb504d6672896a57691b6d82a0aa587b6d409199e9e9576f489c450ea9904dec1c6dbe2dcab3b
- SSDEEP 12288:54DKwKHCjAbD7j9kd1j89Gpm19Fkf7/sa:mevtlkdJe4m19FgV
- MD5 SHA1 SHA512 SSDEEP
Password
infected
VdaN1GI2TTwnq1xfcuZGiVPNHHbdxkEOc.dll
- IMPHASH c73bbc818ceb2fafea2b25df17dec187
- SHA256 efcf59f4423df8fdacbfa8c3d23b6a3e4722bab65c31ea8a7f32daadddfa7adc
- MD5 312594d8c22456b03982d9744cf55cb0
- SHA1 57e6ba85118338d5f695405bb64c4ecaf5f2dae2
- SHA512 92bd3244cc00ef6933e4adbc24f3cdde4660f943d725c69f0b4090b623c9071f5d16cdf69d14c7d44507fd8a9420db567ae819bfbee388c09c9c76158cef2834
- SSDEEP 24576:4E4cLCJMj2C8c3wCRSNWiy/eK5xDegO82/gkU8jG:4GLCJMjl8c3wKwKXeZ
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Minor OS version
Major OS version
Entry point
4864
Magic Number
523
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RemoveVectoredExceptionHandler
RtlCaptureContext
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
SleepEx
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
RtlRestoreContext
RtlUnwindEx
user32
EnumThreadWindows
MessageBoxA
wsprintfA
DllRegisterServer
__CPPdebugHook
Name
.text
Size
305KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rodata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
57KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
105B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
175KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ