1b290acc235ab72f506078ee6c0e0ca7f0141d4375b7568624d0b73c29a8632b[.]zip

General

Target

1b290acc235ab72f506078ee6c0e0ca7f0141d4375b7568624d0b73c29a8632b.zip
Size

629KB
MD5

60d8ed722b7fc0b5e18816bf2e261fee
SHA1

4cd6f85da67810e53bdb63748058c3015f4a6de4
SHA256

ef16cf6632000ad5677b666254f2a1db5dcf6b9970a7ff8fc154f5be6204e17e
SHA512

a5cdc7fa36c9983842280971ee8a143afdcd72431a88ffcb91dd64fb790a14571f9da15850133215e518d2ec75e910951dcd343c4cfe77662c218119af3c571b
SSDEEP

12288:2dZPzc0FQWC+mGTj23SPcuYssMp/Yo6UmLLv0Tk5oSyPO+:ePAGCvGTB5hYUmLp5oBPO+

Score

1^/10

1b290acc235ab72f506078ee6c0e0ca7f0141d4375b7568624d0b73c29a8632b.zip
.zip

Password: infected
1b290acc235ab72f506078ee6c0e0ca7f0141d4375b7568624d0b73c29a8632b.exe
.exe windows x86

Password: infected

6454e523b41ce4606c4d59e3eb617c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetPropA
LoadIconA
CharToOemW
LoadCursorW
MessageBoxA
PostMessageW
GetClassLongW
IsCharLowerW
PeekMessageA
GetDlgItemTextW
LoadBitmapA

kernel32

ReadFile
GetVersionExW
GetTickCount
LoadLibraryW
GetFileAttributesW
CreateProcessA
CloseHandle
LoadLibraryA
HeapAlloc
VirtualAlloc
OpenFileMappingW
FileTimeToSystemTime
CreateMailslotA
SleepEx
FindResourceExA
OpenSemaphoreW
SetCurrentDirectoryA
WriteConsoleW
CopyFileW

nddeapi

NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ