4f3b58d59588e15703fbac2bf445e400[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

4f3b58d59588e15703fbac2bf445e400.zip
Size

19.6MB
MD5

b4c315c95dd70b61b4bc8eaf99e052c7
SHA1

0f2942c3d2bb380923c524a96b9647343e8e06e9
SHA256

2bc5d3312b0260cc06de63a86ce27dd94b1ee0953151180e552f17c25eedcb1a
SHA512

6765e6e1cdcd8bdf4dd0879fd2031ea0be3525d5dd7e7b230e6b62f5c5ad60f529a19d1c77995eff6813a5319b3e6fd6cf1000739910e0f13232fce91bcf7c2b
SSDEEP

393216:8R3vmWXq7H4CJaKH55MefC4avU84TzezEkRvii2sinw6blj/oNbeFrWPZF95:w3eqq7HXJaKZ5NRavn4fmEaii2sinw6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f23006061d3c3529f83dd9a407be5603c27e63e0a4a43015cd23efac25cfbb11

Files

4f3b58d59588e15703fbac2bf445e400.zip
.zip

Password: infected
f23006061d3c3529f83dd9a407be5603c27e63e0a4a43015cd23efac25cfbb11
.exe windows:4 windows x86 arch:x86

Password: infected

a766069487b15778f716ecca453154cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
SizeofResource
GetCPInfo
GetOEMCP
SetErrorMode
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
FindClose
GetFullPathNameA
GetFileAttributesA
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapFree
RaiseException
ExitThread
GetTimeZoneInformation
TlsGetValue
GetACP
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
GlobalReAlloc
GetProfileStringA
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcpynA
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
MulDiv
SetLastError
GetThreadLocale
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalUnlock
LockResource
FindResourceA
LoadResource
CreateEventA
SuspendThread
ResumeThread
SetEvent
WaitForSingleObject
GlobalLock
GlobalDeleteAtom
lstrcmpiA
GetCurrentThreadId
lstrcmpA
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LCMapStringA
GetFileTime
GetVolumeInformationA
FindFirstFileA
FindNextFileA
Process32First
OpenMutexA
Process32Next
GetCurrentDirectoryA
GetPrivateProfileStringA
CreateProcessA
SetUnhandledExceptionFilter
GlobalAlloc
GlobalFree
TerminateThread
CreateThread
GetTickCount
CreateToolhelp32Snapshot
GetShortPathNameA
GetEnvironmentVariableA
lstrcatA
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetModuleFileNameA
WinExec
GetVersionExA
SetFilePointer
GetSystemDirectoryA
CreateFileA
GetFileSize
ReadFile
CloseHandle
FreeLibrary
ReadProcessMemory
CreateFileMappingA
GetCurrentDirectoryW
MultiByteToWideChar
DuplicateHandle
Sleep
IsBadReadPtr
VirtualFree
GetModuleHandleA
VirtualAlloc
VirtualProtect
WriteProcessMemory
LoadLibraryA
GetProcAddress
lstrcpyA
GetCurrentProcess
TerminateProcess
ExitProcess

user32

DestroyMenu
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
GetDesktopWindow
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
SetCursor
PostQuitMessage
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
LoadIconA
GetClientRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
MessageBoxA
OpenDesktopA
EnumDesktopWindows
IsIconic
GetSystemMetrics
DrawIcon
EnableWindow
KillTimer
OpenClipboard
GetDC
SetTimer
InvalidateRect
EnumWindows
GetSysColorBrush
PtInRect
SetWindowPos
GetClassNameA
IsWindowVisible
GetWindowTextA
DefDlgProcA
IsWindowUnicode
PostMessageA
LoadCursorA
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
CharNextA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
MapDialogRect
SetWindowContextHelpId
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
CheckMenuItem
ScreenToClient
SetFocus
OffsetRect
AdjustWindowRectEx
GetSysColor

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetBkMode
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DPtoLP
LPtoDP
GetMapMode
PatBlt
SelectObject
RestoreDC
SaveDC
DeleteDC
GetStockObject
GetDeviceCaps
GetTextColor
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetBkColor

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA

shell32

ShellExecuteA
ShellExecuteExA
SHChangeNotify

comctl32

ord17

oledlg

ord8

ole32

CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocString
SysFreeString
VariantChangeType
SysAllocStringLen
VariantCopy
SysAllocStringByteLen
VarDateFromStr
SysStringLen
VariantTimeToSystemTime
VariantClear

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

iphlpapi

GetIfTable
SetIfEntry
GetAdaptersInfo

Sections

0
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

3
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

6
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

a766069487b15778f716ecca453154cb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

iphlpapi

Sections

0 Size: 204KB - Virtual size: 204KB

1 Size: 4KB - Virtual size: 4KB

2 Size: 40KB - Virtual size: 40KB

3 Size: 52KB - Virtual size: 52KB

4 Size: 4KB - Virtual size: 4KB

5 Size: 20KB - Virtual size: 20KB

6 Size: 304KB - Virtual size: 304KB

7 Size: 72KB - Virtual size: 72KB

8 Size: 4KB - Virtual size: 4KB

9 Size: 32KB - Virtual size: 32KB

0
Size: 204KB - Virtual size: 204KB

1
Size: 4KB - Virtual size: 4KB

2
Size: 40KB - Virtual size: 40KB

3
Size: 52KB - Virtual size: 52KB

4
Size: 4KB - Virtual size: 4KB

5
Size: 20KB - Virtual size: 20KB

6
Size: 304KB - Virtual size: 304KB

7
Size: 72KB - Virtual size: 72KB

8
Size: 4KB - Virtual size: 4KB

9
Size: 32KB - Virtual size: 32KB