LoginMenu[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

LoginMenu.zip
Size

12.3MB
MD5

fbb57ffe88317784e4ed18ed5137e5a6
SHA1

098de45e6ed4e61deaebe5de20fb93b81b6d4a04
SHA256

d0c6063ff0c3a6696bf14eaee2525964071d329a5466c84eee1b35cdb8549241
SHA512

4100dc024b19f3999256950c69d11da7e1ad41cc11d9e8df9d6782d6d5466358574a9ed37a1f190e53229a5516fb9e70ffd76ef3ef6e767022bae99c518d4f81
SSDEEP

393216:utT520MfW3A+K2WORSdFOVTE7LlIganwmu:u72XfIAwR0FMTE7Lli/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LoginMenu.exe

Files

LoginMenu.zip
.zip

Password: 123
LoginMenu.exe
.exe windows:6 windows x64 arch:x64

Password: 123

1ad7f4f793d3408af074e491860f5a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle

advapi32

ChangeServiceConfigA

user32

MessageBoxA

shlwapi

PathFileExistsW

wininet

HttpQueryInfoA

Sections

.text
Size: - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 972KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: - Virtual size: 140B

.syscall
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.=5Q
Size: - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ceJ
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Q,}
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123

Password: 123

1ad7f4f793d3408af074e491860f5a6b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

shlwapi

wininet

Sections

.text Size: - Virtual size: 226KB

.rdata Size: - Virtual size: 71KB

.data Size: - Virtual size: 972KB

.pdata Size: - Virtual size: 11KB

.00cfg Size: - Virtual size: 56B

.gxfg Size: - Virtual size: 8KB

.retplne Size: - Virtual size: 140B

.syscall Size: - Virtual size: 4KB

_RDATA Size: - Virtual size: 500B

.=5Q Size: - Virtual size: 7.5MB

.ceJ Size: 512B - Virtual size: 128B

.Q,} Size: 13.6MB - Virtual size: 13.6MB

.rsrc Size: 512B - Virtual size: 411B

.reloc Size: 512B - Virtual size: 228B

.text
Size: - Virtual size: 226KB

.rdata
Size: - Virtual size: 71KB

.data
Size: - Virtual size: 972KB

.pdata
Size: - Virtual size: 11KB

.00cfg
Size: - Virtual size: 56B

.gxfg
Size: - Virtual size: 8KB

.retplne
Size: - Virtual size: 140B

.syscall
Size: - Virtual size: 4KB

_RDATA
Size: - Virtual size: 500B

.=5Q
Size: - Virtual size: 7.5MB

.ceJ
Size: 512B - Virtual size: 128B

.Q,}
Size: 13.6MB - Virtual size: 13.6MB

.rsrc
Size: 512B - Virtual size: 411B

.reloc
Size: 512B - Virtual size: 228B