7502affbbb6086a020fe2ffe7b079e7ccf8e7fb11d48960561826054b2e0c1fe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

7502affbbb6086a020fe2ffe7b079e7ccf8e7fb11d48960561826054b2e0c1fe.zip
Size

1.0MB
MD5

7c3a631ffeb07498c60ce839d618503f
SHA1

49c64d9df0af3c85de6c9978812471a042ea4a81
SHA256

16c96f706370b66b6f865634724a38bb6e013fc76e40a046c5ae1057a5e625b3
SHA512

d7b62b7fbb61f15cad49d0481cf896c02197f11bd9d63ecc12b70500c21bdaf8c517c6a0d8bb035fd646692a5d8d4fae3498967a1013d3f29896072d34b0a155
SSDEEP

24576:/k0PBQ5hy8m7dN5PelT0P8RF8zStWGDU3VyruDoS5xgG4AItc3N:/rPbhDmlT0kzsSoQ+vt5xNIO

Score

1^/10

Malware Config

Signatures

Files

7502affbbb6086a020fe2ffe7b079e7ccf8e7fb11d48960561826054b2e0c1fe.zip
.zip

Password: infected
7502affbbb6086a020fe2ffe7b079e7ccf8e7fb11d48960561826054b2e0c1fe.dll
.dll windows x86

Password: infected

c9ec03d1eaad4e1692358ca05ade2cf2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

DefDriverProc

secur32

InitializeSecurityContextW

kernel32

lstrcmpiA
DeleteFiber
GetOverlappedResult
ExitProcess
FindFirstVolumeW
GetConsoleCP
GetSystemPowerStatus
GetProcessHeap
GetSystemDefaultUILanguage
GetThreadLocale
EnumTimeFormatsA
DeleteFileA
GetCurrentConsoleFont
GetModuleHandleA
OutputDebugStringA
LoadLibraryExW
GetModuleFileNameA
GetBinaryTypeA
WaitForSingleObjectEx
GetBinaryTypeW
GetLogicalDriveStringsW
GetConsoleMode
VirtualProtectEx

winspool.drv

DeletePrinterDriverExW

msvcrt

mbtowc
fgetws
fputws
fwrite

oleaut32

LoadRegTypeLi

advapi32

DeleteAce
GetFileSecurityW

gdi32

GetTextExtentPointA
GetOutlineTextMetricsA
GetCharWidthA
ExcludeClipRect

shell32

ExtractIconExA

user32

GetMenuItemInfoA
GetClipboardSequenceNumber
GetClipboardFormatNameA
DrawStateA
IsWindowVisible
GetRawInputDeviceInfoW

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 916KB - Virtual size: 914KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

c9ec03d1eaad4e1692358ca05ade2cf2

Headers

DLL Characteristics

File Characteristics

Imports

winmm

secur32

kernel32

winspool.drv

msvcrt

oleaut32

advapi32

gdi32

shell32

user32

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 916KB - Virtual size: 914KB

.data Size: 228KB - Virtual size: 227KB

.rsrc Size: 20KB - Virtual size: 18KB

.reloc Size: 72KB - Virtual size: 70KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 916KB - Virtual size: 914KB

.data
Size: 228KB - Virtual size: 227KB

.rsrc
Size: 20KB - Virtual size: 18KB

.reloc
Size: 72KB - Virtual size: 70KB