844b92d102379990f96dd712b1eb2ade90bee0412333a11a74f77723ff4f91f9[.]100-200[.]exe[.]zip

General

Target

844b92d102379990f96dd712b1eb2ade90bee0412333a11a74f77723ff4f91f9.100-200.exe.zip
Size

4.2MB
MD5

41c6946e980c3a28be440a89921b208e
SHA1

bf2655ef84b3f4d33d9fdde3100c5d5cf54e2716
SHA256

760a36290dd6184edc7759d38438d238b9cc6fb526ed201c7545af00150c615a
SHA512

dcce3c96b06efd14eb19fb4c2df30b8401f992780a24eea22aff71431b4d17e6dd28f4a592c5a62b46134215ccf19ac800dd635b0d7339cf0b645e92ff119b1b
SSDEEP

98304:f+rKcgQuKViGixVZMKgWalEQ+v0b6ZVkXTtAGxOUagw:fOluYc6Pld+v0bGWXpA7Uagw

Score

1^/10

844b92d102379990f96dd712b1eb2ade90bee0412333a11a74f77723ff4f91f9.100-200.exe.zip
.zip

Password: infected
844b92d102379990f96dd712b1eb2ade90bee0412333a11a74f77723ff4f91f9.100-200.exe
.exe windows x86

5720bd0cee3ab34ad6694631cdea7f20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CoInitializeEx

Sections

.MPRESS1
Size: 3.9MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nwxfw
Size: 148.0MB - Virtual size: 148.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ