26af00a279ce082c2bb1db2cb50d2d590623e3f20e6c260d77ca77bf72b51797[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

26af00a279ce082c2bb1db2cb50d2d590623e3f20e6c260d77ca77bf72b51797.zip
Size

453KB
MD5

71ed16db0314080dffdc3116cc0a18a3
SHA1

abb17fa05c60eb11abfce823508440545c93bbf5
SHA256

27e1e687f20b096ac5dd8f565312a0f5e25f33354e7ac26864df68becd902350
SHA512

b03cbe55682522ed094ecb42ecd28a066094ac9399a351a2c487f05ef55ad0b6c0739f6f50a9892b47a62294fca972b4f9a7c791ba6ef6f84c391cba913557fb
SSDEEP

12288:qYPMG5DxvFxPRPe3GzykvkZcAZnRANZuUtML2EzW:pxvdeWOskvn+3m7W

Score

1^/10

Malware Config

Signatures

Files

26af00a279ce082c2bb1db2cb50d2d590623e3f20e6c260d77ca77bf72b51797.zip
.zip

Password: infected
26af00a279ce082c2bb1db2cb50d2d590623e3f20e6c260d77ca77bf72b51797.exe
.dll windows x64

Password: infected

25c7ac00c91884fd2923a489ae9dfbca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetBinaryTypeW
GetModuleFileNameW
GetExitCodeProcess
GetModuleHandleW
GetCurrentProcess
GetCurrentProcessId
GetUserDefaultUILanguage

user32

SetProcessDefaultLayout
IsProcessDPIAware
ChildWindowFromPointEx
GetThreadDesktop

gdi32

GetCharWidthW
FlattenPath

advapi32

InitiateSystemShutdownExW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DwmAttachMilContent
DwmDefWindowProc
DwmDetachMilContent
DwmEnableBlurBehindWindow
DwmEnableComposition
DwmEnableMMCSS
DwmExtendFrameIntoClientArea
DwmFlush
DwmGetColorizationColor
DwmGetCompositionTimingInfo
DwmGetGraphicsStreamClient
DwmGetGraphicsStreamTransformHint
DwmGetTransportAttributes
DwmGetUnmetTabRequirements
DwmGetWindowAttribute
DwmInvalidateIconicBitmaps
DwmIsCompositionEnabled
DwmModifyPreviousDxFrameDuration
DwmQueryThumbnailSourceSize
DwmRegisterThumbnail
DwmRenderGesture
DwmSetDxFrameDuration
DwmSetIconicLivePreviewBitmap
DwmSetIconicThumbnail
DwmSetPresentParameters
DwmSetWindowAttribute
DwmShowContact
DwmTetherContact
DwmTetherTextContact
DwmTransitionOwnedWindow
DwmUnregisterThumbnail
DwmUpdateThumbnailProperties
DwmpAllocateSecurityDescriptor
DwmpDxBindSwapChain
DwmpDxGetWindowSharedSurface
DwmpDxUnbindSwapChain
DwmpDxUpdateWindowRedirectionBltSurface
DwmpDxUpdateWindowSharedSurface
DwmpDxgiIsThreadDesktopComposited
DwmpEnableDDASupport
DwmpFreeSecurityDescriptor
DwmpGetColorizationParameters
DwmpRenderFlick
DwmpSetColorizationParameters

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt1
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

qwTG
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lqen
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vqb
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gjd
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wqhqlp
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nulizw
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fgrum
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjabqc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ghh
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vrqcr
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.siorvl
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sqgym
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kqhrq
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsntf
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iqt
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kpwiuc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yuzcn
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jbsbuw
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdjtj
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mbjeh
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.amb
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lac
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zro
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vtq
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kyhoy
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wvi
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.alzw
Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vdsoxe
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pus
Size: 4KB - Virtual size: 905B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oqnl
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ohjt
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ofjxx
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifw
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zktgse
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmd
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kexxpw
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kiqzd
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uslf
Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zkkgx
Size: 4KB - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.phhwk
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.klf
Size: 4KB - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xme
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fnxmzz
Size: 4KB - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wpkbi
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gzgei
Size: 4KB - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zep
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.viz
Size: 4KB - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xqen
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ouhvqw
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

25c7ac00c91884fd2923a489ae9dfbca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 157KB

.rdata Size: 4KB - Virtual size: 3KB

.crt1 Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 264KB - Virtual size: 263KB

.pdata Size: 4KB - Virtual size: 2KB

qwTG Size: 188KB - Virtual size: 186KB

.rsrc Size: 64KB - Virtual size: 63KB

.reloc Size: 12KB - Virtual size: 10KB

.lqen Size: 280KB - Virtual size: 276KB

.vqb Size: 8KB - Virtual size: 5KB

.gjd Size: 8KB - Virtual size: 4KB

.wqhqlp Size: 8KB - Virtual size: 7KB

.nulizw Size: 4KB - Virtual size: 2KB

.fgrum Size: 4KB - Virtual size: 2KB

.mjabqc Size: 8KB - Virtual size: 4KB

.ghh Size: 8KB - Virtual size: 7KB

.vrqcr Size: 4KB - Virtual size: 1KB

.siorvl Size: 8KB - Virtual size: 4KB

.sqgym Size: 4KB - Virtual size: 2KB

.kqhrq Size: 4KB - Virtual size: 1KB

.rsntf Size: 4KB - Virtual size: 2KB

.iqt Size: 8KB - Virtual size: 4KB

.kpwiuc Size: 8KB - Virtual size: 4KB

.yuzcn Size: 4KB - Virtual size: 1KB

.jbsbuw Size: 4KB - Virtual size: 2KB

.mdjtj Size: 4KB - Virtual size: 571B

.mbjeh Size: 4KB - Virtual size: 571B

.amb Size: 4KB - Virtual size: 954B

.lac Size: 8KB - Virtual size: 6KB

.zro Size: 4KB - Virtual size: 2KB

.vtq Size: 4KB - Virtual size: 2KB

.kyhoy Size: 4KB - Virtual size: 954B

.wvi Size: 8KB - Virtual size: 6KB

.alzw Size: 4KB - Virtual size: 431B

.vdsoxe Size: 4KB - Virtual size: 2KB

.pus Size: 4KB - Virtual size: 905B

.oqnl Size: 4KB - Virtual size: 1KB

.ohjt Size: 4KB - Virtual size: 2KB

.ofjxx Size: 8KB - Virtual size: 6KB

.ifw Size: 4KB - Virtual size: 2KB

.zktgse Size: 4KB - Virtual size: 318B

.pmd Size: 4KB - Virtual size: 318B

.kexxpw Size: 4KB - Virtual size: 954B

.kiqzd Size: 4KB - Virtual size: 318B

.uslf Size: 4KB - Virtual size: 431B

.zkkgx Size: 4KB - Virtual size: 730B

.phhwk Size: 4KB - Virtual size: 1KB

.klf Size: 4KB - Virtual size: 180B

.xme Size: 4KB - Virtual size: 1KB

.fnxmzz Size: 4KB - Virtual size: 1022B

.wpkbi Size: 8KB - Virtual size: 6KB

.gzgei Size: 4KB - Virtual size: 180B

.zep Size: 4KB - Virtual size: 2KB

.viz Size: 4KB - Virtual size: 503B

.xqen Size: 4KB - Virtual size: 571B

.ouhvqw Size: 4KB - Virtual size: 1KB

.text
Size: 160KB - Virtual size: 157KB

.rdata
Size: 4KB - Virtual size: 3KB

.crt1
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 264KB - Virtual size: 263KB

.pdata
Size: 4KB - Virtual size: 2KB

qwTG
Size: 188KB - Virtual size: 186KB

.rsrc
Size: 64KB - Virtual size: 63KB

.reloc
Size: 12KB - Virtual size: 10KB

.lqen
Size: 280KB - Virtual size: 276KB

.vqb
Size: 8KB - Virtual size: 5KB

.gjd
Size: 8KB - Virtual size: 4KB

.wqhqlp
Size: 8KB - Virtual size: 7KB

.nulizw
Size: 4KB - Virtual size: 2KB

.fgrum
Size: 4KB - Virtual size: 2KB

.mjabqc
Size: 8KB - Virtual size: 4KB

.ghh
Size: 8KB - Virtual size: 7KB

.vrqcr
Size: 4KB - Virtual size: 1KB

.siorvl
Size: 8KB - Virtual size: 4KB

.sqgym
Size: 4KB - Virtual size: 2KB

.kqhrq
Size: 4KB - Virtual size: 1KB

.rsntf
Size: 4KB - Virtual size: 2KB

.iqt
Size: 8KB - Virtual size: 4KB

.kpwiuc
Size: 8KB - Virtual size: 4KB

.yuzcn
Size: 4KB - Virtual size: 1KB

.jbsbuw
Size: 4KB - Virtual size: 2KB

.mdjtj
Size: 4KB - Virtual size: 571B

.mbjeh
Size: 4KB - Virtual size: 571B

.amb
Size: 4KB - Virtual size: 954B

.lac
Size: 8KB - Virtual size: 6KB

.zro
Size: 4KB - Virtual size: 2KB

.vtq
Size: 4KB - Virtual size: 2KB

.kyhoy
Size: 4KB - Virtual size: 954B

.wvi
Size: 8KB - Virtual size: 6KB

.alzw
Size: 4KB - Virtual size: 431B

.vdsoxe
Size: 4KB - Virtual size: 2KB

.pus
Size: 4KB - Virtual size: 905B

.oqnl
Size: 4KB - Virtual size: 1KB

.ohjt
Size: 4KB - Virtual size: 2KB

.ofjxx
Size: 8KB - Virtual size: 6KB

.ifw
Size: 4KB - Virtual size: 2KB

.zktgse
Size: 4KB - Virtual size: 318B

.pmd
Size: 4KB - Virtual size: 318B

.kexxpw
Size: 4KB - Virtual size: 954B

.kiqzd
Size: 4KB - Virtual size: 318B

.uslf
Size: 4KB - Virtual size: 431B

.zkkgx
Size: 4KB - Virtual size: 730B

.phhwk
Size: 4KB - Virtual size: 1KB

.klf
Size: 4KB - Virtual size: 180B

.xme
Size: 4KB - Virtual size: 1KB

.fnxmzz
Size: 4KB - Virtual size: 1022B

.wpkbi
Size: 8KB - Virtual size: 6KB

.gzgei
Size: 4KB - Virtual size: 180B

.zep
Size: 4KB - Virtual size: 2KB

.viz
Size: 4KB - Virtual size: 503B

.xqen
Size: 4KB - Virtual size: 571B

.ouhvqw
Size: 4KB - Virtual size: 1KB