bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70[.]zip

General

Target
bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70.zip
Size 84KB
Sample230321-rw3bmadb4s
SHA256 91ac220459304b09c828195af89637b41c988da5dae070f94fca15bae0c0457c
MD5 e7a22793a44a07d9ac3dd743b02123c2
SHA1 db6eae6e11a7c931714e4a14cf3273ca3ea5d48a
SHA512 7f3fa00ad83db30b568f96232f108f42ce59efe75f239e7497afd95126407c28d273558acaf8c1331f5fc892fe8bdd3d186e8b09a03719b129b198285c874ce2
SSDEEP 1536:w/SLhQ/RUSxM4tezteEpN7Y6KljHlFrh1h5MN+m45Yy8ZZlJK3BeYju57CCTnz9L:wKLhQ/RUSxM4tgteljHl5hWJ4p8JE3BK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70.zip

.zip 84KB
bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70.exe

.dll 150KB

bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70.zip

SHA256 91ac220459304b09c828195af89637b41c988da5dae070f94fca15bae0c0457c
MD5 e7a22793a44a07d9ac3dd743b02123c2
SHA1 db6eae6e11a7c931714e4a14cf3273ca3ea5d48a
SHA512 7f3fa00ad83db30b568f96232f108f42ce59efe75f239e7497afd95126407c28d273558acaf8c1331f5fc892fe8bdd3d186e8b09a03719b129b198285c874ce2
SSDEEP 1536:w/SLhQ/RUSxM4tezteEpN7Y6KljHlFrh1h5MN+m45Yy8ZZlJK3BeYju57CCTnz9L:wKLhQ/RUSxM4tgteljHl5hWJ4p8JE3BK
MD5 SHA1 SHA512 SSDEEP

Password

infected

bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70.exe

IMPHASH 3e713fed4424d9ef4872e4dba803d971
SHA256 bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70
MD5 1194f2e1e6d6e80fb8ea69905d18a77c
SHA1 b0e6784083ef003127f55ca13a3d7b21822ffc0f
SHA512 fda8c2cc0b8b59e5a51ebe0219e2cc7013a156b6b0ad138c1af519486bbb9fa35f27fb48264e3fed478ae0d0c82ce8b280a301209fbb21ad5dc83c24ffe88174
SSDEEP 3072:bw7iSXOs2Se0Nca+uuWDtYb7Fu24J9jTIu4Pbl/TtSdUfr:bwFXJka+ZWDZ2oQyd
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Password

infected

Minor OS version

Major OS version

Entry point

16524

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileA CloseHandle GetLastError GetCurrentActCtx CreateActCtxA ActivateActCtx DeactivateActCtx CreateThread FindFirstFileA FindNextFileA WaitForSingleObject GetStdHandle ReleaseActCtx CreateNamedPipeA CallNamedPipeA PeekNamedPipe VirtualAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc CompareStringW LCMapStringW FindClose FindFirstFileExA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetProcessHeap GetFileType GetStringTypeW HeapReAlloc HeapSize SetStdHandle RaiseException WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateFileW

Name

.text

Size

72KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

59KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70.zip

bc74b5b8a64345852af7d6d693558529f4aaaca0d9547aa57279b1cbe998ab70.exe

kernel32