10404555388[.]zip | Triage

Sharing

General

Target

10404555388.zip
Size

18.1MB
MD5

834224b9fc384cf48bdcea905e640573
SHA1

ad4d8cbe173e3736fce2778d4b6261ab1eac511d
SHA256

a964304378e407f391ec44a9e3f6ee0beb58ee9ea189721b7d7f98355ee1fceb
SHA512

4a69d226f0cdcc0ed3aa5c82cc38dd5d2c0aff55c62bb0b80e1e6b47fca1a9c92c70eb43c46ba4da927bd778d150f11a3db32558b84aebafb40733f299cff0b3
SSDEEP

393216:qINlsDhsM7Lno35QsRiDkO3hj3w1HcPgndiJou3y:qksDWMAisRiDkOFAxcondiJouC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4070dfd9a0a74bf30662ffadbce6ebc64eb79ea715068c0455eb5d6ab3e61de5

Files

10404555388.zip
.zip

Password: infected
4070dfd9a0a74bf30662ffadbce6ebc64eb79ea715068c0455eb5d6ab3e61de5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ