zloader 2_1[.]0[.]4[.]0[.]vir

Resubmissions

21-02-2024 18:00

240221-wld89scg8t 10

17-11-2023 10:12

231117-l8q68shg51 10

19-07-2020 17:30

200719-e49qpwlak6 10

Sharing

Copy URL

Twitter E-mail

General

Target

zloader 2_1.0.4.0.vir
Size

300KB
MD5

81baef090e5c513c1598c348d072ce96
SHA1

d5795f51ec36ee0dabd073f694692e2aa507a04a
SHA256

28e752ad86f8f53773bb2e147c1366f5e82b5a8fd2cd80af065decea2e11f694
SHA512

699b797857f33e6937b2655418509d63d87fe18bd790d94c31a611d45b322aa2923d8be1c1df3e8c66ea7e78b93b693f7f366a38eb6b6ea6a4016a1364665520
SSDEEP

6144:ODRRTytCG2AD+dMLtfbPM+jf5nde+zDbf+qk7w:zCG2AKdMDPMMff+qkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zloader 2_1.0.4.0.vir

Files

zloader 2_1.0.4.0.vir
.dll windows:4 windows x86 arch:x86

da6bf84fff1ec1dc82fb3a0741b23f19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateSemaphoreA
SetSystemPowerState
RemoveDirectoryA
LocalAlloc
VirtualProtect
DeleteCriticalSection
CloseHandle
LocalFree
CreateThread
FormatMessageA
HeapSize
GetLocaleInfoA
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
SetEndOfFile
GetCPInfo
GetFileSize
CreateFileA
SetFileAttributesA
GetLastError
GetFileAttributesA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
SetFilePointer
SetStdHandle
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
MultiByteToWideChar
ReadFile
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
FlushFileBuffers
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetWindowRect
GetClientRect
GetForegroundWindow
CreateDialogIndirectParamA
CreatePopupMenu
GetSysColorBrush
DispatchMessageA
DialogBoxIndirectParamA

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA

cabinet

ord10
ord14
ord12

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 9.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

da6bf84fff1ec1dc82fb3a0741b23f19

Headers

File Characteristics

Imports

kernel32

user32

advapi32

cabinet

Sections

.text Size: 128KB - Virtual size: 124KB

.rdata Size: 112KB - Virtual size: 110KB

.data Size: 24KB - Virtual size: 9.0MB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 128KB - Virtual size: 124KB

.rdata
Size: 112KB - Virtual size: 110KB

.data
Size: 24KB - Virtual size: 9.0MB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 28KB - Virtual size: 27KB