80ab4cc96457263ab2d2bfddf29f535c[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
80ab4cc96457263ab2d2bfddf29f535c.zip
Size 309KB
Sample240901-kmfb6swhmd
SHA256 97a1e4e3d8d7bfb8bdb733e24f876a1693395cb356ff8ac0eecdc9ddeea81f3a
MD5 9a298e7dfdd7ed42d8dc18ffe4d8e2ff
SHA1 17638cc7d3f6fe2966bf41752e64c0275eafda80
SHA512 cea0d8c2e7c9245e2e80d0a7a117138406a0006ba175860d3b876c0509449d85c539835446e499626d3399a56beaabd080a511e347717feadc707efa0af2c270
SSDEEP 6144:WQ70mW0LXQUxLC0Wf0Ck4YcPqO321Ku4Nci3AXqMetgBOsHsPHHcCQTu:WQ7NW0kUxJWfTHYO2PT7etgAOiH8C0u
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c44dad1cec69676fef430a195ac52b2ee08947e8be79269c603cfbbc4d27d0ee

File Explorer

80ab4cc96457263ab2d2bfddf29f535c.zip

.zip 309KB
c44dad1cec69676fef430a195ac52b2ee08947e8be79269c603cfbbc4d27d0ee

.exe 436KB

80ab4cc96457263ab2d2bfddf29f535c.zip

SHA256 97a1e4e3d8d7bfb8bdb733e24f876a1693395cb356ff8ac0eecdc9ddeea81f3a
MD5 9a298e7dfdd7ed42d8dc18ffe4d8e2ff
SHA1 17638cc7d3f6fe2966bf41752e64c0275eafda80
SHA512 cea0d8c2e7c9245e2e80d0a7a117138406a0006ba175860d3b876c0509449d85c539835446e499626d3399a56beaabd080a511e347717feadc707efa0af2c270
SSDEEP 6144:WQ70mW0LXQUxLC0Wf0Ck4YcPqO321Ku4Nci3AXqMetgBOsHsPHHcCQTu:WQ7NW0kUxJWfTHYO2PT7etgAOiH8C0u
MD5 SHA1 SHA512 SSDEEP

Password

infected

c44dad1cec69676fef430a195ac52b2ee08947e8be79269c603cfbbc4d27d0ee

IMPHASH 535fa6479108b5163f64223c5e835312
SHA256 c44dad1cec69676fef430a195ac52b2ee08947e8be79269c603cfbbc4d27d0ee
MD5 80ab4cc96457263ab2d2bfddf29f535c
SHA1 2a49d507aa0d90a66b6b8f313eb64875a049ab2b
SHA512 97ff6143fd02e7879519185ddadd308353a2e89532aee6365c57f1cdaf928b39296934a85585d8990f1a0551e03762b0fcd134b2ed1f38444922fd9f63e6f80f
SSDEEP 12288:C4jg5ZqdXUV7j+6khm14Qwxj+R4QBbfwxkZoLKl/nx:Cf5ZqdXUV7j+6mpQwhQyIdx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

19158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind HeapAlloc RaiseException GetStartupInfoA GetCommandLineA TerminateProcess HeapFree HeapReAlloc HeapSize GetACP HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle GetProfileStringA FlushFileBuffers SetFilePointer WriteFile GetCurrentProcess SetErrorMode GetOEMCP GetCPInfo SizeofResource GetProcessVersion WritePrivateProfileStringA GlobalFlags lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc LocalFree MulDiv SetLastError MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedIncrement InterlockedDecrement LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA ExitProcess GetProcAddress GlobalUnlock LockResource FindResourceA LoadResource CloseHandle GetModuleFileNameA GlobalLock GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FormatMessageA GlobalAlloc GlobalFree GetLastError LoadLibraryW SetUnhandledExceptionFilter

user32

SendDlgItemMessageA UpdateWindow IsDialogMessageA SetWindowTextA ShowWindow LoadStringA DestroyMenu ClientToScreen GetDC ReleaseDC GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA LoadCursorA GetClassNameA PtInRect GetSysColorBrush InvalidateRect GetTopWindow GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu MapWindowPoints GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow GetWindow SetWindowLongA SetWindowPos RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled EnableWindow LoadIconA AppendMenuA GetSystemMenu UnregisterClassA HideCaret GetWindowLongA MessageBoxA SetCursor PostQuitMessage PostMessageA wsprintfA GetClientRect IsIconic GetSysColor SetFocus AdjustWindowRectEx GetMenuItemID ScreenToClient DrawIcon GetSystemMetrics CopyRect SendMessageA IsWindowUnicode CharNextA InflateRect DefDlgProcA DrawFocusRect ExcludeUpdateRgn ShowCaret UnhookWindowsHookEx

gdi32

GetStockObject SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect SelectObject DeleteObject GetDeviceCaps CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox CreateDIBitmap PatBlt GetTextExtentPointA BitBlt CreateCompatibleDC CreateBitmap

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegSetValueExA RegCloseKey RegOpenKeyExA RegCreateKeyExA

comctl32

ord17

mpr

WNetOpenEnumA WNetEnumResourceA WNetCloseEnum WNetCancelConnection2A WNetAddConnection2A WNetGetLastErrorA