83228e73a72ecbd4f3546fa6842685b1727cee6f4e95a220d1de0bd0a212d504[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

83228e73a72ecbd4f3546fa6842685b1727cee6f4e95a220d1de0bd0a212d504.zip
Size

137KB
MD5

269d945aa9ec441d22cb143f15d8a1b1
SHA1

b0da009c4cdf0d68dc39c8e437b7229067b9d7c5
SHA256

83228e73a72ecbd4f3546fa6842685b1727cee6f4e95a220d1de0bd0a212d504
SHA512

2262c856175cf711d945c7c23bc47b8d6cd90518ed5f05619b3e015e7d80f32186bc13f42b3495241def6de3bc696490bcaaf355e330707c66750acf1147f560
SSDEEP

3072:D4ZQWptYtZGbxofffPEYmpwrBppkXEC3rhtyrT9pZfGB+wehp55z:D83YtZGbcFmpwrBppgEC3tGTNYehp5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9f6165d02388019c2daed164f8b370c4b5e05e578d8577000e92ea7fb8a2792c.exe

Files

83228e73a72ecbd4f3546fa6842685b1727cee6f4e95a220d1de0bd0a212d504.zip
.zip

Password: infected
9f6165d02388019c2daed164f8b370c4b5e05e578d8577000e92ea7fb8a2792c.exe
.dll regsvr32 windows:4 windows x86 arch:x86

0b4c4277dedb894b7ef56a5718ccce16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

IsTextUnicode
FreeSid
RegQueryValueExW
SetSecurityDescriptorDacl
RegQueryValueExA
RegOpenKeyW
RegEnumValueW
RegOpenKeyExA
GetTokenInformation
AllocateAndInitializeSid
RegEnumKeyExW
EqualSid
RegOpenKeyExW
RegCloseKey
OpenProcessToken
InitializeSecurityDescriptor

comctl32

ImageList_Draw
ImageList_GetIconSize

gdi32

GetCurrentPositionEx
TextOutW
SetViewportExtEx
GetObjectA
GetObjectW
CreateDIBPatternBrushPt
CreateBitmap
SetBrushOrgEx
SetViewportOrgEx
GetTextMetricsA
CreatePen
SetStretchBltMode
ExcludeClipRect
EnumFontFamiliesExA
GetCurrentObject
SetBkMode
Polygon
DPtoLP
GetTextAlign
CreateDIBSection
CreateFontIndirectW
GetClipBox
DeleteObject
StretchBlt
SetMapMode
SetWindowOrgEx
ExtTextOutW
CreateRoundRectRgn
CombineRgn
GetTextExtentPoint32A
StretchDIBits
GetViewportExtEx
GetDeviceCaps
SaveDC
TextOutA
SelectObject
Rectangle
RectVisible
GetPixel
SetLayout
SetBkColor
GetStockObject
SetTextColor
SetPixel
GetTextExtentPoint32W
CreateRectRgnIndirect
PtVisible
SelectClipRgn
GetWindowOrgEx
CreateFontA
SetTextAlign
DeleteDC
PatBlt
GetWindowExtEx
Escape
CreateHatchBrush
RestoreDC
CreatePatternBrush
CreateSolidBrush
IntersectClipRect
LPtoDP
RoundRect
CreateRectRgn
CreateCompatibleBitmap
CreateCompatibleDC
GetMapMode
EnumFontFamiliesExW
SetWindowExtEx
CreateDCA
BitBlt

kernel32

SetThreadLocale
SetEvent
GetLocaleInfoW
GetCurrentProcess
GetLocalTime
FindResourceA
OpenEventW
CreateFileMappingA
SizeofResource
FileTimeToSystemTime
GetShortPathNameW
FindFirstFileW
GetDateFormatW
GetProcAddress
IsBadReadPtr
GlobalLock
GetCurrentProcessId
GetStartupInfoW
GetVersion
SetFilePointer
LocalAlloc
LeaveCriticalSection
lstrcmpiW
GetVersionExW
GetTickCount
GetVersionExA
UnhandledExceptionFilter
FindResourceW
LocalUnlock
MultiByteToWideChar
GetNumberFormatW
LoadLibraryW
QueryPerformanceCounter
MulDiv
IsDebuggerPresent
GetStringTypeA
TerminateProcess
InterlockedDecrement
GlobalUnlock
MapViewOfFile
CreateThread
ReleaseMutex
GetFileSize
FindClose
CreateDirectoryW
RaiseException
GetCurrentThreadId
GetUserDefaultLCID
LocalFree
GetProcessHeap
WaitForMultipleObjects
ReadFile
DeleteCriticalSection
CreateFileA
GlobalAlloc
HeapAlloc
ExitThread
Process32NextW
GetSystemDirectoryW
GetLocaleInfoA
GetThreadLocale
GetCPInfo
GetModuleFileNameW
GetACP
lstrcmpW
WriteFile
WaitForSingleObject
GetFileAttributesW
CloseHandle
SetEndOfFile
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetDiskFreeSpaceExW
LoadLibraryExW
FreeResource
FindNextFileW
HeapFree
Sleep
SystemTimeToFileTime
ExitProcess
FlushViewOfFile
TerminateThread
GetExitCodeProcess
GetTempFileNameA
CreateMutexW
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
InterlockedIncrement
CopyFileW
CreateEventA
GetWindowsDirectoryW
InitializeCriticalSection
GetSystemDirectoryA
GetUserDefaultLangID
VirtualProtect
GetStringTypeW
GetCurrencyFormatW
CreateEventW
InterlockedExchange
SetProcessWorkingSetSize
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
UnmapViewOfFile
GetLastError
GetModuleHandleW
SetLastError
InterlockedCompareExchange
GetTimeFormatW
LockResource
GetTempPathW
SetUnhandledExceptionFilter
GetTempPathA
GetExitCodeThread
LoadResource
LCMapStringW
CreateFileW
FreeLibrary
DeleteFileW

ole32

CoTaskMemFree
CoCreateGuid
StringFromCLSID

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

rpcrt4

NdrConformantArrayUnmarshall
I_RpcGetBuffer
RpcStringFreeW
RpcBindingFromStringBindingW
NdrConformantStringUnmarshall
UuidCreate
NdrConformantArrayMarshall
RpcStringBindingComposeW
RpcBindingServerFromClient
NdrFreeBuffer
RpcBindingToStringBindingW
NdrGetBuffer
NdrConformantStringBufferSize
NdrConformantArrayBufferSize
NdrClientInitializeNew
NdrPointerFree
NdrConformantStringMarshall
RpcRaiseException
RpcBindingFree
NdrConvert
NdrServerInitializeNew
NdrSendReceive
NdrAllocate
RpcStringBindingParseW

shell32

SHGetSpecialFolderLocation
SHGetMalloc
Shell_NotifyIconW
SHGetDesktopFolder
SHBrowseForFolderW
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW

shlwapi

PathIsDirectoryW
ColorHLSToRGB
PathFileExistsW
PathCompactPathW
ColorRGBToHLS

user32

keybd_event
TabbedTextOutW
RegisterClassExW
SetScrollPos
SystemParametersInfoA
DefWindowProcA
DrawIcon
SetWindowLongW
SetCursor
GetAncestor
ModifyMenuW
GetSysColor
GetFocus
BeginPaint
ShowWindow
LoadIconW
RegisterClassW
MapWindowPoints
GetCapture
UpdateWindow
CharLowerBuffW
SendMessageW
ClientToScreen
OpenClipboard
IsWindowEnabled
KillTimer
IsWindowUnicode
TranslateMessage
IsClipboardFormatAvailable
GetAsyncKeyState
ReleaseCapture
GetDlgCtrlID
SystemParametersInfoW
RegisterClipboardFormatW
EmptyClipboard
GetKeyState
SetWindowRgn
MapVirtualKeyW
DrawEdge
LoadBitmapW
CreateIconFromResourceEx
SetWindowLongA
IsIconic
LoadMenuW
PostMessageW
EnableWindow
PtInRect
GrayStringW
DeferWindowPos
GetDC
UnregisterClassW
ScreenToClient
ScrollDC
SetTimer
CreateWindowExA
RedrawWindow
DefWindowProcW
GetActiveWindow
LoadStringW
EndDeferWindowPos
IsWindowVisible
DestroyWindow
InvalidateRect
SetScrollRange
GetWindowLongW
LoadCursorW
BeginDeferWindowPos
AdjustWindowRectEx
CharUpperBuffW
GetDoubleClickTime
RegisterWindowMessageW
SetScrollInfo
GetDesktopWindow
GetSystemMetrics
GetMenuItemID
LoadCursorFromFileA
MessageBeep
EndPaint
PostMessageA
DrawFrameControl
ReleaseDC
SendMessageA
GetClientRect
DrawIconEx
FillRect
GetClipboardData
GetCursorPos
NotifyWinEvent
DrawTextW
GetWindowRect
wsprintfW
SetCapture
LoadCursorA
ScrollWindowEx
OffsetRect
LoadImageW
InflateRect
IsWindow
DrawTextA
TrackPopupMenu
WindowFromPoint
GetMenuItemCount
EnumClipboardFormats
CheckMenuItem
UnregisterClassA
RegisterWindowMessageA
SetParent
GetMessageA
SetMenuDefaultItem
SetFocus
SetClipboardData
SendMessageTimeoutA
GetScrollInfo
GetScrollPos
SetForegroundWindow
GetClassLongA
DestroyIcon
GetSubMenu
InvertRect
EnableMenuItem
MoveWindow
CountClipboardFormats
GetWindowThreadProcessId
GetWindowLongA
GetCaretBlinkTime
CreateWindowExW
DispatchMessageA
RegisterClipboardFormatA
GetWindow
CopyRect
DrawTextExW
FindWindowW
RegisterClassExA
GetWindowDC
CloseClipboard
DrawFocusRect
CreateCursor
GetWindowPlacement
GetParent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

HttpQueryInfoA
InternetErrorDlg
InternetCloseHandle
InternetConnectA
InternetQueryOptionA
InternetSetOptionA
InternetGetLastResponseInfoA
InternetReadFile
HttpSendRequestA
InternetCombineUrlA
InternetOpenA
HttpOpenRequestA

winmm

timeSetEvent
timeGetTime
timeGetDevCaps
timeKillEvent

Exports

Exports

Farcist
DllGetClassObject
Irrefragableness
Anchistea
Cammed
Kissy
DllUnregisterServer
Prosing
Fellowship
Cotransfuse
Gallfly
Tock
Inconceivably
Liquorer
Inspectorship
Opisthodomos
Spatuliform
Parthenope
Yellowbird
Aletris
DllRegisterServer
Cholagogue
Droppingly
Coadjutator
Semicrustaceous
Lymphogranuloma
Exegetically
Donation
Ricine
Prolacrosse
Requisiteness
Reconcilable
Arthroxerosis
Muridae
Clarion
Michoacan
Typhlomolge
Ribbony
DllCanUnloadNow
Backchat
Piggishly
Preocular
Kukuruku

Sections

.text
Size: 212KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

0b4c4277dedb894b7ef56a5718ccce16

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

ole32

oleacc

rpcrt4

shell32

shlwapi

user32

version

wininet

winmm

Exports

Exports

Sections

.text Size: 212KB - Virtual size: 243KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 212KB - Virtual size: 243KB

.reloc
Size: 2KB - Virtual size: 2KB