6b2b19e169923a9765c225d8904983a3b7421e0d7c0e8df299721e55dbe8c01a[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

6b2b19e169923a9765c225d8904983a3b7421e0d7c0e8df299721e55dbe8c01a.zip
Size

128KB
MD5

06dac069b1b6782736cce2340af248f2
SHA1

2611cab9e5dea6a13dac82be051f3fbd73534d30
SHA256

ff0d6f0dfe38dc28a2f053a74f67a88d26d27a9aaa66c5a9f270d413e7fa6f4c
SHA512

d3c1ae9f1a5cd66995524fc3118ee198a431de61ea846d8bd5b273bf943daef31c97a220e006b4a6f19787af7277a77d4e43606aee78c9ec5b59d745901ca19f
SSDEEP

3072:8kAQLksysunwCfxFe8/cmhZWxq8H+pSpdFSo4U6D+S0wnJmD:NNcs9CJbkmhU7e4H6D+S/4

Score

1^/10

Malware Config

Signatures

Files

6b2b19e169923a9765c225d8904983a3b7421e0d7c0e8df299721e55dbe8c01a.zip
.zip

Password: infected
6b2b19e169923a9765c225d8904983a3b7421e0d7c0e8df299721e55dbe8c01a.exe
.exe windows x86

Password: infected

04ac9617c34172e16c360c717c2451c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
WriteConsoleInputA
GetWindowsDirectoryW
FindFirstVolumeMountPointW
FindFirstChangeNotificationW
WaitForMultipleObjects
ReadConsoleInputA
VerifyVersionInfoW
GetVersionExA
OpenEventA
SetLocaleInfoA
GetProcAddress
LocalAlloc
DeleteFileA
EnumResourceTypesW
GetLongPathNameW
LoadLibraryW
GetBinaryTypeA
SetLastError
LocalShrink
WriteProfileStringW
GetComputerNameExA
GetConsoleAliasA
WriteProfileSectionW
GetModuleHandleA
GetSystemPowerStatus
GetModuleHandleW
EnumResourceLanguagesA
SetDefaultCommConfigA
EnumDateFormatsW
SetVolumeMountPointA
GetStartupInfoA
CreateJobSet
WritePrivateProfileStringW
GetStringTypeW
GetShortPathNameW
FindNextFileW
EnumCalendarInfoA
AddRefActCtx
GetLastError
HeapSize
WriteConsoleW
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
CloseHandle
HeapCreate
HeapAlloc
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LCMapStringW
Sleep
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
CreateFileW

user32

LoadMenuW

shell32

CommandLineToArgvW

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

04ac9617c34172e16c360c717c2451c4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 78KB - Virtual size: 78KB

.data Size: 77KB - Virtual size: 1.3MB

.rsrc Size: 42KB - Virtual size: 42KB

.text
Size: 78KB - Virtual size: 78KB

.data
Size: 77KB - Virtual size: 1.3MB

.rsrc
Size: 42KB - Virtual size: 42KB