appleID[.]106209106[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

appleID.106209106.zip
Size

39.3MB
MD5

4c2b9badb840f90f2797b7dc26ae528e
SHA1

418a132bb3b848bdf09b8ef469bc96cf6bb9a2cd
SHA256

1a8fa83a6b79df3b9fdc367c3d994f20cd85938d71de02948a781a8735daed4c
SHA512

48b3aa61f00ba8faebbb8e0c18e09ec4bfa0843f7d50aebd9ee51aecaaccc735af068aebe29668f1367a2ff9970e51a8e651a93a50c38b1cec4672344046ac8d
SSDEEP

786432:nNzOC7TGbpMRVyFD3yWNTeKBDvKp4rXjDHoFugYntneImJwEUig0Et6BanPMUAlv:nNzOuGbWRVwD3yWNqKB2p4rXPCJ0tnRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/appleID.106209106.exe

Files

appleID.106209106.zip
.zip
appleID.106209106.exe
.exe windows x86

ffc8b7355e6ca1feb1ec52ffa2a44d5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
IsBadWritePtr
lstrlenW
FatalAppExitA
DebugBreak
lstrcpyW
FreeResource
FindResourceW
LoadResource
GetCurrentProcess
SizeofResource
GetConsoleWindow
GetFileAttributesW
GetModuleFileNameW
GetLongPathNameW
LockResource
CloseHandle
GetFileSize
_llseek
WriteFile
ReadFile
CreateFileW
VirtualFree
FreeLibrary
WaitForSingleObject
CreateRemoteThread
OpenProcess
VirtualFreeEx
LoadLibraryW
ReadProcessMemory
GetProcAddress
VirtualAlloc
VirtualAllocEx
GetSystemInfo
GetCurrentThreadId
WriteProcessMemory
SetFilePointer
Sleep
SystemTimeToTzSpecificLocalTime
GetTickCount
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
GetCurrentThread
InitializeCriticalSection
TerminateThread
LeaveCriticalSection
EnterCriticalSection
OpenThread
GetExitCodeThread
DeleteCriticalSection
SuspendThread
ResumeThread
AllocConsole
ReadConsoleA
FlushConsoleInputBuffer
SetConsoleMode
GetACP
GetConsoleOutputCP
GetStdHandle
SetConsoleCtrlHandler
SetConsoleWindowInfo
SetConsoleTitleW
GetCurrentProcessId
GetFileAttributesA
HeapFree
GetProcessHeap
IsBadReadPtr
LoadLibraryA
VirtualProtect
GetCPInfo
GetOEMCP
IsValidCodePage
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetFullPathNameW
HeapReAlloc
GetStringTypeW
ExitThread
CreateThread
RtlUnwind
GetTimeFormatW
GetDateFormatW
GetSystemTimeAsFileTime
DuplicateHandle
CreateProcessA
DeleteFileW
MoveFileW
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
CreateProcessW
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CompareStringW
IsProcessorFeaturePresent
CreateFileA
CreatePipe
GetExitCodeProcess
HeapSize
WriteConsoleW
GetCurrentDirectoryW
GetDriveTypeW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
LocalFree
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
SetErrorMode

user32

WinHelpA
MapWindowPoints
IsWindow
IsWindowVisible
EqualRect
GetActiveWindow
LoadIconA
RegisterClassA
GetClientRect
ShowWindow
DefWindowProcA
SetWindowPos
GetSystemMenu
SetActiveWindow
IsIconic
ModifyMenuA
GetWindowThreadProcessId
SendMessageA
GetMessageW
TranslateMessage
PeekMessageW
DispatchMessageW
SetForegroundWindow
MessageBoxW
SetWindowRgn
GetWindowRect
wsprintfA
SetFocus
OffsetRect
IntersectRect
MessageBoxA
GetWindowLongA
CreateWindowExA
CallWindowProcA

ole32

OleRegGetUserType
CreateOleAdviseHolder
CoTaskMemAlloc
OleCreate
OleSetContainedObject
StringFromIID
CLSIDFromString
CLSIDFromProgID
CoRegisterClassObject
CoRevokeClassObject
MkParseDisplayName
CreateBindCtx
CoCreateInstance
CoLockObjectExternal
StringFromCLSID
OleInitialize
OleUninitialize
CoTaskMemFree

shlwapi

SHDeleteKeyA
StrFormatByteSizeW

gdi32

SetViewportOrgEx
SetWindowOrgEx
DeleteObject
CreateRectRgnIndirect
SetViewportExtEx
SetWindowExtEx
SetMapMode

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegEnumKeyExA
RegCreateKeyExA

shell32

ord165

oleaut32

SysFreeString
UnRegisterTypeLi
GetActiveObject
VariantInit
VariantCopyInd
VariantClear
LoadTypeLibEx
SysAllocStringLen
LoadRegTypeLi
LHashValOfNameSys
SafeArrayCreateVector
VariantTimeToSystemTime
SafeArrayAccessData
VariantCopy
SafeArrayDestroy
SafeArrayCreate
SystemTimeToVariantTime
SafeArrayGetDim
VariantChangeType
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayPutElement
DispGetIDsOfNames
SysStringLen

Sections

.text
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40.7MB - Virtual size: 40.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffc8b7355e6ca1feb1ec52ffa2a44d5e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

shlwapi

gdi32

advapi32

shell32

oleaut32

Sections

.text Size: 534KB - Virtual size: 533KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 40.7MB - Virtual size: 40.7MB

.text
Size: 534KB - Virtual size: 533KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 40.7MB - Virtual size: 40.7MB