10408768173[.]zip | Triage

Sharing

General

Target

10408768173.zip
Size

11KB
MD5

3d82616dce23615d8536d1c3aaafa3e7
SHA1

9a6fe9909671f31baa81950d4c854e71600efe3b
SHA256

3fe64cf67a5c6a08d575bc57edadadc2ca4a9e4dd6fa80503e37b4c22e73101d
SHA512

f174336556fe942c470d5de0e6150aec39db4c63539a02843ca66b83d0f36f3e822d75be4f8405eb12cccd87d32ba137ca31924d78bd80a32902974fd13297a4
SSDEEP

192:X1NcZV9fePhcIeXbLI8GRxQu7AYDtXjxC9EKFdT1uSczbJWKDKQsvHT02W2ngIqf:30LfePvAbLXGRyc9DtzYnFcXkKBCHT0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/33fb8a305c7b02b3367839b6197f9610096b44bccf9beb9da764ffeea29a2289

Files

10408768173.zip
.zip

Password: infected
33fb8a305c7b02b3367839b6197f9610096b44bccf9beb9da764ffeea29a2289
.exe windows x86

ecf1bd3206976f3e5a517a2b934d647d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
MessageBoxW
wsprintfW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetModuleHandleA
CreateFileW
CloseHandle
GetFileSize

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ