873d61d252596ef91e699d9c5a641119[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

873d61d252596ef91e699d9c5a641119.zip
Size

1.1MB
MD5

53e96f100b2104db8d6a2e7e4e6a3cdc
SHA1

faef32f77fa1ef84aea99ebe80303ea88e3803fc
SHA256

337df24a0a893ff8c2930d5ccf98713a8fc0c28e4563115b8cf7abf875be3403
SHA512

57b2e872786f050c79ae76e2cce5dc28044a4d2ce49c20cd8c8c19f3a3334448e02a9b8360459967f1609116e84b7e144a5b70470009b2ee9f00c1f91ff65600
SSDEEP

12288:3yCQdm5Th9FCsGOCMUJRbUDZOIGrww9vn9HpJXxn2Ul/tBiY0sJ8DuKimeYyzaHK:7QIi/yUrj9vnVXXd8EmeY0a5wLQAsx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/6ee402c592b8d9a8f65b1e9871916bf8bf08118253758af2bd8d02b053b3af20

Files

873d61d252596ef91e699d9c5a641119.zip
.zip

Password: infected
6ee402c592b8d9a8f65b1e9871916bf8bf08118253758af2bd8d02b053b3af20
.exe windows:5 windows x86 arch:x86

Password: infected

56c207817e66e7690a43bf97b1ee7374

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\xikoturabesova\lajohoribo_wo.pdb

Imports

kernel32

TlsGetValue
SetLocalTime
InterlockedIncrement
GetCommState
GetProfileStringW
UnlockFile
CallNamedPipeW
FreeEnvironmentStringsA
GetNumberFormatA
FindResourceExA
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleAliasExesLengthW
HeapDestroy
CreateSemaphoreA
EnumResourceLanguagesA
GetModuleFileNameW
GetCompressedFileSizeA
GetSystemDirectoryA
CreateActCtxA
GetBinaryTypeW
LCMapStringA
GetStartupInfoA
lstrlenA
GetStdHandle
FreeLibraryAndExitThread
GetLastError
GetProcAddress
CreateNamedPipeA
EnterCriticalSection
LoadLibraryA
OpenMutexA
WritePrivateProfileStringA
SetThreadIdealProcessor
FindAtomA
SetSystemTime
FindNextFileA
WriteProfileStringA
CreateIoCompletionPort
FindFirstChangeNotificationA
HeapSetInformation
GetCurrentDirectoryA
SetFileShortNameA
UnregisterWaitEx
CopyFileExA
DeleteFileA
GetVolumeInformationW
LocalFileTimeToFileTime
GetThreadContext
SetThreadLocale
GetCommandLineW
WideCharToMultiByte
EncodePointer
DecodePointer
GetCommandLineA
GetStartupInfoW
InterlockedDecrement
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
HeapValidate
IsBadReadPtr
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
IsProcessorFeaturePresent
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
SetStdHandle
FlushFileBuffers
RaiseException
CreateFileW
CloseHandle

advapi32

InitiateSystemShutdownA
AbortSystemShutdownA

winhttp

WinHttpOpen

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 39.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11.9MB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

56c207817e66e7690a43bf97b1ee7374

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

winhttp

Sections

.text Size: 106KB - Virtual size: 105KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 67KB - Virtual size: 39.3MB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 11.9MB - Virtual size: 66KB

.text
Size: 106KB - Virtual size: 105KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 67KB - Virtual size: 39.3MB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 11.9MB - Virtual size: 66KB