dc63c79c3f7bc083812b8e8f47c44902[.]zip

General

Target
dc63c79c3f7bc083812b8e8f47c44902.zip
Size 192KB
Sample240831-hrlnms1dpf
SHA256 1806e405c12737768f8c99f5e04d781920b2585283d82ff0683203fe5d991eda
MD5 2e1d4419d0bba44d6b13acf7daf4fd7e
SHA1 2bb303efc6233efaa374b5bbe61124f9d93a2319
SHA512 321dcd7ade31e535822f4e6082481891630a579c2fb3884da4f76d7cf53383d7aef61745f75a2412aa45ae4fa28271b326e2fd694a5397967155a28bf007cf9b
SSDEEP 6144:V/72CwV75xp56SjNjmWLHNIFaUTTdKAXjl:pw5T1jRmWLHNIFaUTTdVzl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d29a3b017f6a864c855fca570073d822bb37a77006467b8a75f04ce7edcbfedc

File Explorer

dc63c79c3f7bc083812b8e8f47c44902.zip

.zip 192KB
d29a3b017f6a864c855fca570073d822bb37a77006467b8a75f04ce7edcbfedc

.exe 14.5MB

dc63c79c3f7bc083812b8e8f47c44902.zip

SHA256 1806e405c12737768f8c99f5e04d781920b2585283d82ff0683203fe5d991eda
MD5 2e1d4419d0bba44d6b13acf7daf4fd7e
SHA1 2bb303efc6233efaa374b5bbe61124f9d93a2319
SHA512 321dcd7ade31e535822f4e6082481891630a579c2fb3884da4f76d7cf53383d7aef61745f75a2412aa45ae4fa28271b326e2fd694a5397967155a28bf007cf9b
SSDEEP 6144:V/72CwV75xp56SjNjmWLHNIFaUTTdKAXjl:pw5T1jRmWLHNIFaUTTdVzl
MD5 SHA1 SHA512 SSDEEP

Password

infected

d29a3b017f6a864c855fca570073d822bb37a77006467b8a75f04ce7edcbfedc

IMPHASH b6fc451038266fcf59b2e92a5ee2c7df
SHA256 d29a3b017f6a864c855fca570073d822bb37a77006467b8a75f04ce7edcbfedc
MD5 dc63c79c3f7bc083812b8e8f47c44902
SHA1 640329ba407b6ed8482d2d5e0d082847451a7d37
SHA512 5610cb53a6274f62be4e9341f6eb0fda3e28ccb4f69b344b63c4a531f9044ca758519f89aacc5d312624962606e80333ae38fab9ea84e453513c7f754e6b2534
SSDEEP 12288:OZlC6v/5oQU6buXH53333333333333333333333333333333333333333333333n:ObjvluXH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

5

Entry point

8096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wofo.pdb

kernel32

GetThreadContext UnregisterWait DosDateTimeToFileTime FindFirstChangeNotificationW CopyFileExW TlsGetValue CallNamedPipeA HeapAlloc SetWaitableTimer InterlockedIncrement InterlockedDecrement GlobalLock GetProfileStringW FreeEnvironmentStringsA CreateNamedPipeW LocalFlags GetCompressedFileSizeW SetCommState GetCommandLineA SetProcessPriorityBoost GetSystemTimes ActivateActCtx GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA LoadLibraryW TerminateThread LeaveCriticalSection VerifyVersionInfoA IsDBCSLeadByte lstrlenW LCMapStringA InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError SetLastError GetProcAddress SetStdHandle DisableThreadLibraryCalls LoadLibraryA WritePrivateProfileStringA FindAtomA GetModuleFileNameA WriteProfileStringA GetThreadPriority CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW FindNextFileW GetCurrentDirectoryA GetCurrentThreadId LocalSize EnumResourceLanguagesW GetSystemTime GetProfileSectionW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW CreateFileA CloseHandle FlushFileBuffers

Sharing