1fa1033d2424f8d2e903c39db0bf420eb736383313c989d4e7d4805fbdaa26ff[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

1fa1033d2424f8d2e903c39db0bf420eb736383313c989d4e7d4805fbdaa26ff.zip
Size

446KB
MD5

e96c51674d6ed61ecf60ca90cea9ac7e
SHA1

d8ea13f2b17ada367fc3ec4222f6a20476ae6fcc
SHA256

efc14c8b50b7ffb788ffb05b03f21919579a5faf9513ca8717892c33df05d0c7
SHA512

68938a0167812d6b2e28930558ebd950262ea1029a6a318f8217e6d271635e50dc41a6da5f8653df3f1faedfb908e3e0244d755e495172a0f92970cb223b3838
SSDEEP

12288:mlMK+w3P8y8J72JWsmZ7rhdu7pw72Bf4SyYZEPf0mSpL+N/qC:mOKVP8BJquZ7rhga7ZfY5mSJQ/qC

Score

1^/10

Malware Config

Signatures

Files

1fa1033d2424f8d2e903c39db0bf420eb736383313c989d4e7d4805fbdaa26ff.zip
.zip

Password: infected
1fa1033d2424f8d2e903c39db0bf420eb736383313c989d4e7d4805fbdaa26ff.exe
.dll windows x64

Password: infected

7be87787770ca1ffe5c8c785748fac0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

gdi32

AbortPath

msvcrt

memset

kernel32

GetTickCount64
TryEnterCriticalSection

ole32

OleInitialize

user32

GetSystemMenu
GetUpdatedClipboardFormats
PrintWindow
ToAscii

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 401B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

N8N
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

z
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R+gb
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.iaprt
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uzsq
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gvasp
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.esxf
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.anocu
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hsjjd
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dewfv
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kidbq
Size: 4KB - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yzxvnk
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hlvpto
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gmgzxx
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srz
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hzk
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pibml
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mwwsh
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pic
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dxo
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gguv
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mcho
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdtpw
Size: 4KB - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sfqm
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srzn
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.btdgh
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fhdbf
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wcq
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sor
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gjenv
Size: 4KB - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rcnulg
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jbs
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lyyvv
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fuvd
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gyi
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hyc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nzshk
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.umvi
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsnrj
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hwkpn
Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zbeeg
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gbqtb
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jxjle
Size: 4KB - Virtual size: 905B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ljxwi
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rbvzho
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etg
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cvik
Size: 4KB - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gjop
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.znp
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsrtsy
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yqrvbq
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cexh
Size: 4KB - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yosz
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

7be87787770ca1ffe5c8c785748fac0c

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

msvcrt

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 32KB - Virtual size: 29KB

.pdata Size: 4KB - Virtual size: 401B

N8N Size: 32KB - Virtual size: 28KB

z Size: 36KB - Virtual size: 35KB

R+gb Size: 300KB - Virtual size: 297KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 3KB

.iaprt Size: 4KB - Virtual size: 1KB

.uzsq Size: 8KB - Virtual size: 4KB

.gvasp Size: 4KB - Virtual size: 1KB

.esxf Size: 8KB - Virtual size: 4KB

.anocu Size: 4KB - Virtual size: 954B

.hsjjd Size: 4KB - Virtual size: 318B

.dewfv Size: 28KB - Virtual size: 27KB

.kidbq Size: 4KB - Virtual size: 730B

.yzxvnk Size: 4KB - Virtual size: 571B

.hlvpto Size: 8KB - Virtual size: 6KB

.gmgzxx Size: 4KB - Virtual size: 1KB

.srz Size: 4KB - Virtual size: 1KB

.hzk Size: 4KB - Virtual size: 318B

.pibml Size: 8KB - Virtual size: 4KB

.mwwsh Size: 4KB - Virtual size: 2KB

.pic Size: 4KB - Virtual size: 571B

.dxo Size: 4KB - Virtual size: 1KB

.gguv Size: 4KB - Virtual size: 571B

.mcho Size: 4KB - Virtual size: 2KB

.pdtpw Size: 4KB - Virtual size: 494B

.sfqm Size: 4KB - Virtual size: 954B

.srzn Size: 8KB - Virtual size: 4KB

.btdgh Size: 4KB - Virtual size: 2KB

.fhdbf Size: 8KB - Virtual size: 4KB

.wcq Size: 4KB - Virtual size: 318B

.sor Size: 4KB - Virtual size: 1KB

.gjenv Size: 4KB - Virtual size: 1022B

.rcnulg Size: 4KB - Virtual size: 954B

.jbs Size: 4KB - Virtual size: 318B

.lyyvv Size: 8KB - Virtual size: 4KB

.fuvd Size: 8KB - Virtual size: 4KB

.gyi Size: 4KB - Virtual size: 2KB

.hyc Size: 28KB - Virtual size: 27KB

.nzshk Size: 4KB - Virtual size: 1KB

.umvi Size: 4KB - Virtual size: 571B

.rsnrj Size: 4KB - Virtual size: 318B

.hwkpn Size: 4KB - Virtual size: 431B

.zbeeg Size: 4KB - Virtual size: 2KB

.gbqtb Size: 8KB - Virtual size: 4KB

.jxjle Size: 4KB - Virtual size: 905B

.ljxwi Size: 4KB - Virtual size: 571B

.rbvzho Size: 4KB - Virtual size: 571B

.etg Size: 8KB - Virtual size: 4KB

.cvik Size: 4KB - Virtual size: 1022B

.gjop Size: 4KB - Virtual size: 571B

.znp Size: 4KB - Virtual size: 2KB

.vsrtsy Size: 4KB - Virtual size: 1KB

.yqrvbq Size: 4KB - Virtual size: 2KB

.cexh Size: 4KB - Virtual size: 571B

.yosz Size: 4KB - Virtual size: 1KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 32KB - Virtual size: 29KB

.pdata
Size: 4KB - Virtual size: 401B

N8N
Size: 32KB - Virtual size: 28KB

z
Size: 36KB - Virtual size: 35KB

R+gb
Size: 300KB - Virtual size: 297KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 3KB

.iaprt
Size: 4KB - Virtual size: 1KB

.uzsq
Size: 8KB - Virtual size: 4KB

.gvasp
Size: 4KB - Virtual size: 1KB

.esxf
Size: 8KB - Virtual size: 4KB

.anocu
Size: 4KB - Virtual size: 954B

.hsjjd
Size: 4KB - Virtual size: 318B

.dewfv
Size: 28KB - Virtual size: 27KB

.kidbq
Size: 4KB - Virtual size: 730B

.yzxvnk
Size: 4KB - Virtual size: 571B

.hlvpto
Size: 8KB - Virtual size: 6KB

.gmgzxx
Size: 4KB - Virtual size: 1KB

.srz
Size: 4KB - Virtual size: 1KB

.hzk
Size: 4KB - Virtual size: 318B

.pibml
Size: 8KB - Virtual size: 4KB

.mwwsh
Size: 4KB - Virtual size: 2KB

.pic
Size: 4KB - Virtual size: 571B

.dxo
Size: 4KB - Virtual size: 1KB

.gguv
Size: 4KB - Virtual size: 571B

.mcho
Size: 4KB - Virtual size: 2KB

.pdtpw
Size: 4KB - Virtual size: 494B

.sfqm
Size: 4KB - Virtual size: 954B

.srzn
Size: 8KB - Virtual size: 4KB

.btdgh
Size: 4KB - Virtual size: 2KB

.fhdbf
Size: 8KB - Virtual size: 4KB

.wcq
Size: 4KB - Virtual size: 318B

.sor
Size: 4KB - Virtual size: 1KB

.gjenv
Size: 4KB - Virtual size: 1022B

.rcnulg
Size: 4KB - Virtual size: 954B

.jbs
Size: 4KB - Virtual size: 318B

.lyyvv
Size: 8KB - Virtual size: 4KB

.fuvd
Size: 8KB - Virtual size: 4KB

.gyi
Size: 4KB - Virtual size: 2KB

.hyc
Size: 28KB - Virtual size: 27KB

.nzshk
Size: 4KB - Virtual size: 1KB

.umvi
Size: 4KB - Virtual size: 571B

.rsnrj
Size: 4KB - Virtual size: 318B

.hwkpn
Size: 4KB - Virtual size: 431B

.zbeeg
Size: 4KB - Virtual size: 2KB

.gbqtb
Size: 8KB - Virtual size: 4KB

.jxjle
Size: 4KB - Virtual size: 905B

.ljxwi
Size: 4KB - Virtual size: 571B

.rbvzho
Size: 4KB - Virtual size: 571B

.etg
Size: 8KB - Virtual size: 4KB

.cvik
Size: 4KB - Virtual size: 1022B

.gjop
Size: 4KB - Virtual size: 571B

.znp
Size: 4KB - Virtual size: 2KB

.vsrtsy
Size: 4KB - Virtual size: 1KB

.yqrvbq
Size: 4KB - Virtual size: 2KB

.cexh
Size: 4KB - Virtual size: 571B

.yosz
Size: 4KB - Virtual size: 1KB