10250600596[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

10250600596.zip
Size

449KB
MD5

9a54b13fa98b26255ee6d907799c096a
SHA1

c8309cc70f054dc039eb1ccaaf34fd77b45acdb0
SHA256

5fd69b9251683005d98d5e8cc7e17bbbce1bfdff5350c4da0a7c44f8cfc9d156
SHA512

a0b0bbd71afe1b2da0e970a9f561f787c03ce62ff0792b335d59e3056f90dd2461fb45bcd7056402a500187312823fc8cc8fb52dd81cb6168772820705b94a3b
SSDEEP

6144:dkIC4B241Wcb7uO0AGyawGIP9MZ626B+uiLqxVlmO7nH8Xe46eP2LsOMno8o9916:OItx7ul4aN8VsLOHa69Lsno71jm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cb310f61ceae1f3b9fd7d7707be22cc594d2a7c43bf3614851551dc8fa4d9e73

Files

10250600596.zip
.zip

Password: infected
cb310f61ceae1f3b9fd7d7707be22cc594d2a7c43bf3614851551dc8fa4d9e73
.exe windows x86

c3bdbc3f60b23537f466a17ba881f3eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
HeapCreate
SetUnhandledExceptionFilter
GetFileType
HeapSize
GetEnvironmentVariableA
HeapDestroy
GetVersionExA
SetStdHandle
GetStdHandle
GetCurrentDirectoryA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetACP
HeapReAlloc
CompareStringA
InitializeCriticalSection
TlsAlloc
TerminateProcess
GetLocalTime
SetEnvironmentVariableA
CompareStringW
HeapAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
CreateMutexA
GetLastError
GetVersion
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GlobalFree
lstrcatA
WinExec
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
FindFirstFileA
FindClose
lstrlenA
GlobalAlloc
GlobalLock
lstrcpyA
GlobalUnlock
DeleteFileA
GetSystemTime
GetTimeZoneInformation
ExitProcess
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
CopyFileA
GetProfileStringA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
LocalReAlloc
GlobalHandle
SizeofResource
GlobalFlags
GetDiskFreeSpaceA
GetTempFileNameA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GetProfileIntA
MulDiv
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
lstrcpynA
GetFileTime
GetFileAttributesA
FindNextFileA
SetLastError
FormatMessageA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
LocalAlloc
LocalFree
GlobalSize
CreateFileA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
CloseHandle
SetFilePointer
WriteFile
ReadFile
GetTickCount
GlobalReAlloc
GetModuleFileNameA
DeleteCriticalSection
OutputDebugStringA
TlsFree
TlsGetValue

user32

GetSysColorBrush
GetClassNameA
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
LoadStringA
ValidateRect
GetSystemMenu
DeleteMenu
AppendMenuA
SetParent
IsZoomed
RedrawWindow
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
CharUpperA
WindowFromPoint
SetRect
IsRectEmpty
EndPaint
BeginPaint
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
WinHelpA
GetClassInfoA
GetMenuStringA
InsertMenuA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
LockWindowUpdate
GetForegroundWindow
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
wvsprintfA
GetActiveWindow
MessageBoxA
GetCapture
ClipCursor
GetMessageA
SetWindowLongA
UnregisterHotKey
RegisterHotKey
GetMenu
ModifyMenuA
GetClipboardData
FillRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FindWindowA
UpdateWindow
GetMenuItemID
LoadMenuA
GetSubMenu
SetMenuDefaultItem
ScreenToClient
ClientToScreen
CreatePopupMenu
TrackPopupMenu
wsprintfA
DestroyMenu
LoadBitmapA
GetDesktopWindow
CreateDialogIndirectParamA
LoadIconA
RegisterWindowMessageA
MessageBeep
InvertRect
GetDCEx
PostThreadMessageA
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
DestroyIcon
GetTabbedTextExtentA
GetMenuItemCount
RegisterClassA
GetLastActivePopup
CopyIcon
GetParent
PostMessageA
CopyRect
GrayStringA
DrawTextA
TabbedTextOutA
SetCursorPos
GetSysColor
SetCursor
GetCursorPos
GetDC
IsWindow
GetWindowDC
ReleaseDC
GetTopWindow
GetWindow
IsWindowVisible
PtInRect
UnionRect
ReleaseCapture
GetWindowRect
InflateRect
GetClientRect
PeekMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
SetForegroundWindow
SetCapture
DestroyCursor
LoadCursorA
SetTimer
KillTimer
InvalidateRect
EnableWindow
SendMessageA
IsChild
MoveWindow
ShowCaret
ExcludeUpdateRgn
HideCaret
DefDlgProcA
IsWindowUnicode
DrawFocusRect
UnregisterClassA

gdi32

DeleteObject
CreateCompatibleBitmap
GetDeviceCaps
GetStockObject
RealizePalette
SelectObject
CreateDIBitmap
DPtoLP
SelectPalette
SetMapMode
GetMapMode
GetClipBox
CreateRectRgnIndirect
StartDocA
SetPolyFillMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
CreateBitmap
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateHatchBrush
SetRectRgn
CombineRgn
GetCharWidthA
GetTextMetricsA
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
LPtoDP
CopyMetaFileA
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
Rectangle
GetDIBits
GetTextExtentPointA
CreatePalette
DeleteDC
GetSystemPaletteEntries
SetBkColor
SetTextColor
CreateSolidBrush
SetStretchBltMode
StretchDIBits
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
EnumFontsA
CreateFontA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
PatBlt
SaveDC
SetROP2
CreatePatternBrush
CreatePen
BitBlt
SetBkMode
SetDIBitsToDevice
RestoreDC
CreateDCA
CreateCompatibleDC
StretchBlt

comdlg32

GetOpenFileNameA
CommDlgExtendedError
PrintDlgA
ChooseColorA
GetFileTitleA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

GetFileSecurityA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
SetFileSecurityA
RegSetValueA
RegCreateKeyA

shell32

ExtractIconA
DragAcceptFiles
DragQueryFileA
DragFinish
Shell_NotifyIconA
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
SHGetFileInfoA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

OleDuplicateData
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
ReleaseStgMedium
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
DoDragDrop
CoRevokeClassObject
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantClear
VariantCopy

Sections

.text
Size: 652KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

c3bdbc3f60b23537f466a17ba881f3eb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 652KB - Virtual size: 648KB

.rdata Size: 152KB - Virtual size: 148KB

.data Size: 48KB - Virtual size: 160KB

.rsrc Size: 104KB - Virtual size: 120KB

.text
Size: 652KB - Virtual size: 648KB

.rdata
Size: 152KB - Virtual size: 148KB

.data
Size: 48KB - Virtual size: 160KB

.rsrc
Size: 104KB - Virtual size: 120KB