10996559210[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

10996559210.zip
Size

248KB
MD5

a713419e594d52554dd6ae38d0f8d908
SHA1

3ee3fa14a84812183da7a8d9620aede2333e5adf
SHA256

559d2ca268d0dc731dca9b30050adb412af1c3698fbd5d84c7f541f7c21b3c2d
SHA512

2b2d582dc14e03dc2dd4c2da9bb6970f3ef9a67516b9c139908b9efa4138c23e594e7cab767c4d281139f2270358ecc1ec2d147643a66551f07c4d6905eeb182
SSDEEP

6144:9xklpjdITmSVUq/XP2KTNK2TOfPuYmX73e2uBHhV6J8yJaV1:9+lpjsVx02K0u2uBBf1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/87cb0f7cfd260cd53d0b3362af5698b3931a345c6898ffdd32adcec8aa9be9d8

Files

10996559210.zip
.zip

Password: infected
87cb0f7cfd260cd53d0b3362af5698b3931a345c6898ffdd32adcec8aa9be9d8
.exe windows x64

Password: infected

a744ed2202a78b5904ae0ebfaf70a75b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

AllowSetForegroundWindow

shell32

CommandLineToArgvW

kernel32

LeaveCriticalSection
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
GetCurrentDirectoryW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
SetEnvironmentVariableW
CloseHandle
GetLastError
WaitForSingleObject
LoadLibraryExW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FreeLibrary
GetModuleHandleExW
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageW
CreateFileW
FindClose
FindNextFileW
GetFileAttributesW
SetLastError
GetCommandLineW
GetExitCodeProcess
CreateProcessW
SetDllDirectoryW
GetEnvironmentVariableW
GetSystemDirectoryW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
RtlUnwind
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FlsFree
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFullPathNameW
GetDriveTypeW
ExitProcess
GetStdHandle
WriteFile
GetCommandLineA
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue

Exports

Exports

jvmLauncherGetAPI

Sections

.text
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

a744ed2202a78b5904ae0ebfaf70a75b

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

kernel32

Exports

Exports

Sections

.text Size: 285KB - Virtual size: 284KB

.rdata Size: 100KB - Virtual size: 100KB

.data Size: 7KB - Virtual size: 13KB

.pdata Size: 14KB - Virtual size: 14KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 40KB - Virtual size: 40KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 285KB - Virtual size: 284KB

.rdata
Size: 100KB - Virtual size: 100KB

.data
Size: 7KB - Virtual size: 13KB

.pdata
Size: 14KB - Virtual size: 14KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 40KB - Virtual size: 40KB

.reloc
Size: 3KB - Virtual size: 2KB