477e6dfb9977fda6b718b1f0feb5756ff687de77e00102f00345a52343d59115[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

477e6dfb9977fda6b718b1f0feb5756ff687de77e00102f00345a52343d59115.zip
Size

445KB
MD5

f5b466624abfd4c08aa1b77dc9d3ebcf
SHA1

3c3f8ebc0924d06371fa3f6f954fed61a5615e83
SHA256

9535554dd3b429b337691e5b9e218f979bba7ea77f919c6a5068901f698f61f7
SHA512

f9cd841ccedc94bf92f11d220ac69bb52507cad79f7a5ef16f82d2ec71c79f43769f6fe9e7f9530f88d86b37e13578c2f66e88189f805ae4d47e830aeb66ef7d
SSDEEP

6144:xRGr6d/wH014Vla8qibIuWGoTJxhMVJ1MZ0BGI6Rux9smz/NMa4QObNrIwnjFKyZ:PGGd/BmVk8DxotxMJUlI6EjjkK/udH

Score

1^/10

Malware Config

Signatures

Files

477e6dfb9977fda6b718b1f0feb5756ff687de77e00102f00345a52343d59115.zip
.zip

Password: infected
477e6dfb9977fda6b718b1f0feb5756ff687de77e00102f00345a52343d59115.exe
.dll windows x64

Password: infected

7be87787770ca1ffe5c8c785748fac0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

gdi32

AbortPath

msvcrt

memset

kernel32

GetTickCount64
TryEnterCriticalSection

ole32

OleInitialize

user32

GetSystemMenu
GetUpdatedClipboardFormats
PrintWindow
ToAscii

Exports

Exports

ApplyCompatResolutionQuirking
CompatString
CompatValue
CreateDXGIFactory
CreateDXGIFactory1
CreateDXGIFactory2
DXGID3D10CreateDevice
DXGID3D10CreateLayeredDevice
DXGID3D10ETWRundown
DXGID3D10GetLayeredDeviceSize
DXGID3D10RegisterLayers
DXGIDeclareAdapterRemovalSupport
DXGIDumpJournal
DXGIGetDebugInterface1
DXGIReportAdapterConfiguration
DXGIRevertToSxS
PIXBeginCapture
PIXEndCapture
PIXGetCaptureState
SetAppCompatStringPointer
UpdateHMDEmulationStatus

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 401B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

N8N
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

z
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R+gb
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.iaprt
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uzsq
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gvasp
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.esxf
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.anocu
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hsjjd
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dewfv
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kidbq
Size: 4KB - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yzxvnk
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hlvpto
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gmgzxx
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srz
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hzk
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pibml
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mwwsh
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pic
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dxo
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gguv
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mcho
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdtpw
Size: 4KB - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sfqm
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srzn
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.btdgh
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fhdbf
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wcq
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sor
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gjenv
Size: 4KB - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rcnulg
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jbs
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lyyvv
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fuvd
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gyi
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hyc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nzshk
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.umvi
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsnrj
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hwkpn
Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zbeeg
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gbqtb
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.scuul
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ghs
Size: 4KB - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

7be87787770ca1ffe5c8c785748fac0c

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

msvcrt

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 32KB - Virtual size: 29KB

.pdata Size: 4KB - Virtual size: 401B

N8N Size: 32KB - Virtual size: 28KB

z Size: 36KB - Virtual size: 35KB

R+gb Size: 300KB - Virtual size: 297KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 3KB

.iaprt Size: 4KB - Virtual size: 1KB

.uzsq Size: 8KB - Virtual size: 4KB

.gvasp Size: 4KB - Virtual size: 1KB

.esxf Size: 8KB - Virtual size: 4KB

.anocu Size: 4KB - Virtual size: 954B

.hsjjd Size: 4KB - Virtual size: 318B

.dewfv Size: 28KB - Virtual size: 27KB

.kidbq Size: 4KB - Virtual size: 730B

.yzxvnk Size: 4KB - Virtual size: 571B

.hlvpto Size: 8KB - Virtual size: 6KB

.gmgzxx Size: 4KB - Virtual size: 1KB

.srz Size: 4KB - Virtual size: 1KB

.hzk Size: 4KB - Virtual size: 318B

.pibml Size: 8KB - Virtual size: 4KB

.mwwsh Size: 4KB - Virtual size: 2KB

.pic Size: 4KB - Virtual size: 571B

.dxo Size: 4KB - Virtual size: 1KB

.gguv Size: 4KB - Virtual size: 571B

.mcho Size: 4KB - Virtual size: 2KB

.pdtpw Size: 4KB - Virtual size: 494B

.sfqm Size: 4KB - Virtual size: 954B

.srzn Size: 8KB - Virtual size: 4KB

.btdgh Size: 4KB - Virtual size: 2KB

.fhdbf Size: 8KB - Virtual size: 4KB

.wcq Size: 4KB - Virtual size: 318B

.sor Size: 4KB - Virtual size: 1KB

.gjenv Size: 4KB - Virtual size: 1022B

.rcnulg Size: 4KB - Virtual size: 954B

.jbs Size: 4KB - Virtual size: 318B

.lyyvv Size: 8KB - Virtual size: 4KB

.fuvd Size: 8KB - Virtual size: 4KB

.gyi Size: 4KB - Virtual size: 2KB

.hyc Size: 28KB - Virtual size: 27KB

.nzshk Size: 4KB - Virtual size: 1KB

.umvi Size: 4KB - Virtual size: 571B

.rsnrj Size: 4KB - Virtual size: 318B

.hwkpn Size: 4KB - Virtual size: 431B

.zbeeg Size: 4KB - Virtual size: 2KB

.gbqtb Size: 8KB - Virtual size: 4KB

.scuul Size: 4KB - Virtual size: 2KB

.ghs Size: 4KB - Virtual size: 730B

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 32KB - Virtual size: 29KB

.pdata
Size: 4KB - Virtual size: 401B

N8N
Size: 32KB - Virtual size: 28KB

z
Size: 36KB - Virtual size: 35KB

R+gb
Size: 300KB - Virtual size: 297KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 3KB

.iaprt
Size: 4KB - Virtual size: 1KB

.uzsq
Size: 8KB - Virtual size: 4KB

.gvasp
Size: 4KB - Virtual size: 1KB

.esxf
Size: 8KB - Virtual size: 4KB

.anocu
Size: 4KB - Virtual size: 954B

.hsjjd
Size: 4KB - Virtual size: 318B

.dewfv
Size: 28KB - Virtual size: 27KB

.kidbq
Size: 4KB - Virtual size: 730B

.yzxvnk
Size: 4KB - Virtual size: 571B

.hlvpto
Size: 8KB - Virtual size: 6KB

.gmgzxx
Size: 4KB - Virtual size: 1KB

.srz
Size: 4KB - Virtual size: 1KB

.hzk
Size: 4KB - Virtual size: 318B

.pibml
Size: 8KB - Virtual size: 4KB

.mwwsh
Size: 4KB - Virtual size: 2KB

.pic
Size: 4KB - Virtual size: 571B

.dxo
Size: 4KB - Virtual size: 1KB

.gguv
Size: 4KB - Virtual size: 571B

.mcho
Size: 4KB - Virtual size: 2KB

.pdtpw
Size: 4KB - Virtual size: 494B

.sfqm
Size: 4KB - Virtual size: 954B

.srzn
Size: 8KB - Virtual size: 4KB

.btdgh
Size: 4KB - Virtual size: 2KB

.fhdbf
Size: 8KB - Virtual size: 4KB

.wcq
Size: 4KB - Virtual size: 318B

.sor
Size: 4KB - Virtual size: 1KB

.gjenv
Size: 4KB - Virtual size: 1022B

.rcnulg
Size: 4KB - Virtual size: 954B

.jbs
Size: 4KB - Virtual size: 318B

.lyyvv
Size: 8KB - Virtual size: 4KB

.fuvd
Size: 8KB - Virtual size: 4KB

.gyi
Size: 4KB - Virtual size: 2KB

.hyc
Size: 28KB - Virtual size: 27KB

.nzshk
Size: 4KB - Virtual size: 1KB

.umvi
Size: 4KB - Virtual size: 571B

.rsnrj
Size: 4KB - Virtual size: 318B

.hwkpn
Size: 4KB - Virtual size: 431B

.zbeeg
Size: 4KB - Virtual size: 2KB

.gbqtb
Size: 8KB - Virtual size: 4KB

.scuul
Size: 4KB - Virtual size: 2KB

.ghs
Size: 4KB - Virtual size: 730B