dmg2img-1[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

dmg2img-1.zip
Size

91KB
MD5

6e6aee1ba402d9e11f49a199ee884a3e
SHA1

be8247bcb301ebb1fb3b26013e5e5cf82c38c0e1
SHA256

eb5f0faeb2cf26c64183226924180b8640e0f33d7cdd27e0fbd4c4dfa28dc284
SHA512

ee7a23df9fd5efd0f1f4272d37ee476474b9975c178b5702663a2b00d5275aaa57f2fa1190e13e68687eea59768e389a91976db477138506408a795fb47e9f7a
SSDEEP

1536:3FjbKnhQLMpygmxvoEcoI7KIjj0lIZz9dy8dAtC8NGZVSkeH4/1oOUyAmpUc:1bSiMs9loEc+IZRdy8dBckeH4/1qy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dmg2img-1/bzip2.dll
unpack001/dmg2img-1/dmg2img.exe
unpack001/dmg2img-1/zlib1.dll

Files

dmg2img-1.zip
.zip
__MACOSX/._dmg2img-1
__MACOSX/dmg2img-1/._COPYING
__MACOSX/dmg2img-1/._README
__MACOSX/dmg2img-1/._bzip2.dll
__MACOSX/dmg2img-1/._dmg2img.exe
__MACOSX/dmg2img-1/._zlib1.dll
dmg2img-1/COPYING
dmg2img-1/README
dmg2img-1/bzip2.dll
.dll windows:4 windows x86 arch:x86

2baae54f1c7db41fe6b4712c00a47440

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
__mb_cur_max
_assert
_errno
_fdopen
_iob
_isctype
_pctype
_setmode
abort
exit
fclose
fflush
fgetc
fopen
fprintf
fputc
fread
free
fwrite
malloc
memset
strcat
ungetc

Exports

Exports

BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite
DllGetVersion

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 701B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dmg2img-1/dmg2img.exe
.exe windows:4 windows x86 arch:x86

0882bb982a3fc88ccdd6b3a8b7cec2e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

bzip2

BZ2_bzCompressEnd
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_filelengthi64
_iob
_onexit
_setmode
_stricmp
abort
atexit
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
malloc
printf
putchar
puts
realloc
signal
sprintf
sscanf
strcat
strcmp
strcpy
strstr
vfprintf

zlib1

inflate
inflateEnd
inflateInit_

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 800B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dmg2img-1/zlib1.dll
.dll windows:4 windows x86 arch:x86

07761085e6d5abbc4cbf0976d6b9a264

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

_fdopen
__dllonexit
_errno
_filelengthi64
_vsnprintf
abort
clearerr
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
malloc
memcpy
memset
sprintf
strcat
strcpy
strerror
strlen

Exports

Exports

DllGetVersion
_dist_code
_length_code
_tr_align
_tr_flush_block
_tr_init
_tr_stored_block
_tr_tally
adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
deflate_copyright
get_crc_table
gzclearerr
gzclose
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflatePrime
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
inflate_copyright
inflate_fast
inflate_table
uncompress
zError
z_errmsg
zcalloc
zcfree
zlibCompileFlags
zlibVersion

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2baae54f1c7db41fe6b4712c00a47440

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 48KB

.data Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 208B

.edata Size: 1024B - Virtual size: 701B

.idata Size: 1024B - Virtual size: 724B

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 1024B - Virtual size: 656B

0882bb982a3fc88ccdd6b3a8b7cec2e6

Headers

File Characteristics

Imports

bzip2

kernel32

msvcrt

zlib1

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 800B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

07761085e6d5abbc4cbf0976d6b9a264

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 63KB

.data Size: 512B - Virtual size: 112B

.bss Size: - Virtual size: 144B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 840B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 840B

.text
Size: 48KB - Virtual size: 48KB

.data
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 208B

.edata
Size: 1024B - Virtual size: 701B

.idata
Size: 1024B - Virtual size: 724B

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 1024B - Virtual size: 656B

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 800B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.text
Size: 63KB - Virtual size: 63KB

.data
Size: 512B - Virtual size: 112B

.bss
Size: - Virtual size: 144B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 840B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 840B