10019406880[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10019406880.zip
Size

14KB
MD5

cf86a08fe6ba4d840157185eb08b9299
SHA1

411f9e00a8d1c319b297601916bb89f352afd4c2
SHA256

e2c5af537025cfb63c7596ecaf49e8db3740a8bb0c0dc42e0df9ef436fd9843e
SHA512

185e7e5ac33c8a3910fbd6e15945f1a7638d2132ded0299f629041c97be603cc5f99343aebbdc914075f8615753df1802cbd2d1e7ad9d2ae28572b5ff558dc50
SSDEEP

192:fb73ovv7FBbJazs4bRh8CpluvPCcL7B5Tnv8Lhp7JSuoy+FpPU8JiJQZPx2suMJQ:fAxNAplunNLF5Tn0Lh+/pBpPV9Hw

Score

1^/10

Malware Config

Signatures

Files

10019406880.zip
.zip

Password: infected
3c9f4145e310f616bd5e36ca177a3f370edc13cf2d54bb87fe99972ecf3f09b4
.exe windows x86

Password: infected

181707b71861c10305050499e9195f43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetProcessHeap
FindFirstFileW
FindNextFileW
WriteFile
WaitForMultipleObjects
FindClose
CreateFileW
ExitThread
Sleep
CloseHandle
GetDriveTypeW
EnterCriticalSection
ReleaseSemaphore
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateSemaphoreA
GetModuleFileNameW
GetSystemInfo
CreateThread
ExitProcess
LoadLibraryA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ