G3651586539[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

G3651586539.zip
Size

335KB
MD5

114e70577cef4a6fa95c87cb466dd130
SHA1

f8b309cba7ffd889b2b41c136046e756a48751b3
SHA256

d974945b1b9d63a0c82f563ddd4baea79ae9d3cdf336f0272f4d3f004df15e3d
SHA512

0a18fe87454a50013e5c927e24ded8c153a779f30c29355e37d6fd96b6ea132300f14f632573cdaaf109c29b86c9fd28650e3cc7282860630147fece6e69628c
SSDEEP

6144:tR2UHMHEkkPZF73Qc/AiJ86yZPpmZkSjsIMkGRnMCQXJBPFEPUZCKo:f9sktZta6yaZkStbXJ1FEx

Score

N/A

Malware Config

Signatures

Files

G3651586539.zip
.zip

Password: H322
Card#6859.iso
.iso

Password: H322
CardS.lnk
.lnk
anticipations/blues.db
.dll windows x86

Password: H322

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
anticipations/deepeningBlockhouse.js
.js
anticipations/mucksNatively.cmd