9802201766[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

9802201766.zip
Size

1.1MB
MD5

a343df3e3a348ccd33ea4eef9ce8697e
SHA1

f361e038b59eef98051ad097d9708aadc2d4ce99
SHA256

5d4d34ebd85508f47f77ac6808ad4f30fea0829134da06d423af57c77bdea574
SHA512

7ad473bc1dc477d1c8a05a14924d73d41b168290ddb676d810fd0f518a91737d7f67111ddc99400f22467e956f0f6972362d9adc42a58222ebc23fc5d04debca
SSDEEP

24576:DP2CQCS2DHvhpFvgBp5EurXS8zVD99WX34uzJmV8jXgt4Fu1rxs1:DvlvhpebDLzVzWYkJE8zIri

Score

1^/10

Malware Config

Signatures

Files

9802201766.zip
.zip

Password: infected
d836a9bdaa98b3c72c8d5251f2c19c49fb8156f4fbfba63b5daa121e78f9254a
.exe windows x86

ff0c1d65305980be6ca84fa9653cba54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

comdlg32

GetSaveFileNameA

Sections

CODE
Size: - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SSQ0
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SSQ1
Size: - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.SSQ2
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

ff0c1d65305980be6ca84fa9653cba54

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

comctl32

comdlg32

Sections

CODE Size: - Virtual size: 581KB

DATA Size: - Virtual size: 9KB

BSS Size: - Virtual size: 3KB

.idata Size: - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: - Virtual size: 24B

.SSQ0 Size: - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 1.2MB

.SSQ1 Size: - Virtual size: 257KB

.SSQ2 Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 512B - Virtual size: 172B

CODE
Size: - Virtual size: 581KB

DATA
Size: - Virtual size: 9KB

BSS
Size: - Virtual size: 3KB

.idata
Size: - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: - Virtual size: 24B

.SSQ0
Size: - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 1.2MB

.SSQ1
Size: - Virtual size: 257KB

.SSQ2
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 512B - Virtual size: 172B