b6fbba05f1a32b2fe499818cf4f2e09b6d6110e715e19efd16274a644f338a0c[.]zip

General

Target

b6fbba05f1a32b2fe499818cf4f2e09b6d6110e715e19efd16274a644f338a0c.zip
Size

6.2MB
MD5

bee34d7bc7743b752557d07d59653712
SHA1

f811c66b326f9342859662fdb9c2e8e093532f6e
SHA256

8adcb9d7a51fbc928551a16818e8a2d54636d05417f9d1036ec11267062e6a6d
SHA512

2e259b7a8adbab462d955c851bb1919395fe1c0847bde24ef5d0d092369f978b6164723dd753603cdb1a69015e4592e3078b656428e11f899813b144c12fc31d
SSDEEP

98304:RQneTNOms7Gj9aD0w85WNFDaKrJ/Gt/mSNVhekvszbicmr4tQPOG2:Oem7Gj9Lb5W75/G9m4LekEvgc3D

Score

1^/10

b6fbba05f1a32b2fe499818cf4f2e09b6d6110e715e19efd16274a644f338a0c.zip
.zip

Password: infected
b6fbba05f1a32b2fe499818cf4f2e09b6d6110e715e19efd16274a644f338a0c.exe
.exe windows x86

Password: infected

42a4be2e16070c563b65000460421a66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ReleaseDC
CharUpperBuffW

gdi32

GetDeviceCaps

ole32

CoCreateInstance

oleaut32

SysFreeString

Sections

.text
Size: - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!EZ
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Urs
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.?=S
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ