9781415336[.]zip | Triage™

General

Target
9781415336.zip
Size 380KB
Sample230330-pwet8aeb3x
SHA256 de1faf3fcafdbd74109603d185dd4518fe4784bf144ec1cf5d3d79a8d64020a3
MD5 ed85cb53e075b1ab833e62df4324a50d
SHA1 1a6c31f30d7e79c2a3d6d97ac009edc895b2513c
SHA512 5a3a4cbdf714212352e20a7566732a37b0c8d9537d7e3565b3d766f1b0200cb4fffdba777767229ebd2d6b70e48dc17d61e7289d264bbb6c7991651a05aa8acc
SSDEEP 6144:D3t/f/KGu0ViJ3odR2HEvlqWmnOLcKSNTaDJTckolMuzG4+ekU+z4KCgbJTA+7So:Dd/3ZhAJ4HeEIlnOozToJTckoawG2kUE
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9781415336.zip

.zip 380KB
3fe9192d920b89dc62dc264e7b2647920b902fde5cd2f2c960f4b493b1f89d47

.exe 819KB

9781415336.zip

SHA256 de1faf3fcafdbd74109603d185dd4518fe4784bf144ec1cf5d3d79a8d64020a3
MD5 ed85cb53e075b1ab833e62df4324a50d
SHA1 1a6c31f30d7e79c2a3d6d97ac009edc895b2513c
SHA512 5a3a4cbdf714212352e20a7566732a37b0c8d9537d7e3565b3d766f1b0200cb4fffdba777767229ebd2d6b70e48dc17d61e7289d264bbb6c7991651a05aa8acc
SSDEEP 6144:D3t/f/KGu0ViJ3odR2HEvlqWmnOLcKSNTaDJTckolMuzG4+ekU+z4KCgbJTA+7So:Dd/3ZhAJ4HeEIlnOozToJTckoawG2kUE
MD5 SHA1 SHA512 SSDEEP

Password

infected

3fe9192d920b89dc62dc264e7b2647920b902fde5cd2f2c960f4b493b1f89d47

IMPHASH 14d015e74f1cd4f74cd6e34e5843530f
SHA256 3fe9192d920b89dc62dc264e7b2647920b902fde5cd2f2c960f4b493b1f89d47
MD5 874d604e9d69452e9a153f2600f9e510
SHA1 03e48b0a70060b10d0f1f5e20b48b69ce12e0215
SHA512 764e990a607555526ccda80ae0bdff80d1798b18e802f21dc91456ea9c276bbdb7f996f3c6b0dfa45e04a02b0bf486e0e9af72e4719c9bf7caf12d736c5475eb
SSDEEP 12288:RywTrJQaTd+OeO+OeNhBBhhBBYIoMcuceoj7EotNDkf1TiYxawKtTtMVFQa1S46R:RyalQazIHYtNDkf4YxawgeJkxSalPt6
MD5 SHA1 SHA512 SSDEEP

windows x86

Password

infected

Minor OS version

Major OS version

Entry point

416955

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW OpenMutexW GetTickCount GetModuleFileNameW lstrcmpW FindFirstVolumeW FindNextVolumeW FindVolumeClose GetVolumeInformationW GetVolumePathNamesForVolumeNameW CreateFileW WriteFile CloseHandle GetLastError ReadFile SetEndOfFile SetFileAttributesW SetFilePointerEx WaitForSingleObject CreateThread MoveFileW SetLastError QueryPerformanceCounter QueryPerformanceFrequency SetStdHandle FindNextFileW FindFirstFileW GetFileSizeEx FindClose WaitForSingleObjectEx Sleep GetCurrentThreadId GetNativeSystemInfo InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx TryEnterCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW InitializeSListHead IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId RaiseException RtlUnwind InterlockedPushEntrySList TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetStdHandle HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW HeapReAlloc HeapSize GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap WriteConsoleW

advapi32

CryptReleaseContext CryptAcquireContextA CryptGenRandom

Resubmissions

Sharing