12238116132[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

12238116132.zip
Size

221KB
MD5

8b685fc09ece87e02d21753a8590c39a
SHA1

4fed45b7d37bd34137be814639c150af01e87ded
SHA256

1dcc041a1ef7757cafd389ff273ed99ff66ed12b40310ac10311f9e34269dd10
SHA512

5dff66d8864aeda7ef0039b8767215cdb42576d144999cf1c1510011d3c3b36b5cebc908cd9de72bed40926a16326f54fdcd9506487f7137b044ff501f3accb0
SSDEEP

6144:wu79lUzfctj5APn/IvKJyfvQTtkUw+tSJGK:XzUzEJ5APnwvroTtQzJGK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4304e038656f1705995b08e0a5b7a4ef7b020d492f14d73a365f36aeaae2cfa8

Files

12238116132.zip
.zip

Password: infected
4304e038656f1705995b08e0a5b7a4ef7b020d492f14d73a365f36aeaae2cfa8
.exe windows:6 windows x86

Password: infected

747487aa75cb4a3edd92435011008c39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExW
SystemTimeToTzSpecificLocalTime
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetCPInfo
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
GetFileType
ExitProcess
GetStdHandle
HeapQueryInformation
GetModuleHandleExW
GetCommandLineW
RtlUnwind
OutputDebugStringW
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
CreateFileW
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FormatMessageW
LocalFree
GlobalFree
GlobalUnlock
GlobalFindAtomW
GetSystemDirectoryW
EncodePointer
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateEventW
SetEvent
FindResourceW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetACP
GetCurrentProcessorNumber
GetCommandLineA
GetCurrentProcess
VirtualAlloc
IsDebuggerPresent
GetLastError
GetEnvironmentStringsW
IsSystemResumeAutomatic
GetUserDefaultLangID
GetSystemDefaultUILanguage
GetLargePageMinimum
GetThreadLocale
GetOEMCP
GetCurrentThread
GetSystemDefaultLangID
GetThreadUILanguage
GetErrorMode
GetProcessHeap
GetTickCount64
CloseHandle
FindClose
GetStartupInfoW
WriteConsoleW
LoadLibraryA

user32

SetWindowTextW
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
LoadIconW
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
UpdateWindow
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenu
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsMenu
IsWindow
SetTimer
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessagePos
RegisterWindowMessageW
GetWindow
GetWindowTextW
GetScrollPos
GetLastActivePopup
AnyPopup
GetMenuCheckMarkDimensions
GetOpenClipboardWindow
CreateMenu
GetWindowThreadProcessId
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SetCursor
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
ClientToScreen
LoadCursorW
SetMenu
GetForegroundWindow
GetCapture
GetKBCodePage
GetMessageExtraInfo
GetClipboardViewer
CountClipboardFormats
DestroyCaret
GetShellWindow
GetDialogBaseUnits
IsProcessDPIAware
GetMessageTime
SetProcessDPIAware
GetCursor
GetFocus
EmptyClipboard
UnregisterClassW
GetClientRect
SetRectEmpty
OffsetRect
GetParent
PostMessageW
PostQuitMessage
SendMessageW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
SetMenuItemInfoW
LoadBitmapW
GetMessageW
DestroyMenu
CharUpperW
GetSysColorBrush
GetSystemMetrics
ReleaseDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
InvalidateRect
CreateWindowExW
KillTimer
RealChildWindowFromPoint

gdi32

Escape
GetClipBox
GetStockObject
PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
SetTextColor
SetBkColor
CreateBitmap
GdiFlush
DeleteDC

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
CoFreeUnusedLibraries
OleUninitialize

oleaut32

VariantChangeType
VariantClear
VariantInit
SysAllocString
SysFreeString

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

747487aa75cb4a3edd92435011008c39

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

oleacc

Sections

.text Size: 188KB - Virtual size: 188KB

.rdata Size: 57KB - Virtual size: 57KB

.data Size: 6KB - Virtual size: 17KB

.gfids Size: 3KB - Virtual size: 2KB

.giats Size: 512B - Virtual size: 4B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 135KB - Virtual size: 135KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 188KB - Virtual size: 188KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 6KB - Virtual size: 17KB

.gfids
Size: 3KB - Virtual size: 2KB

.giats
Size: 512B - Virtual size: 4B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 135KB - Virtual size: 135KB

.reloc
Size: 13KB - Virtual size: 12KB