BOA[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BOA.zip
Size

661KB
MD5

5196ffc261b4bffb9f060c018d045143
SHA1

9a27542231f62ae90ee84ebc6f0ef4d9e33ff16a
SHA256

00f6b34cc0143b92ea7f721fc187466c354b274ce6b4e66c13f4ccd21fa85c20
SHA512

9e8648484944a52f9ab348e55a8247e3706332346b73056082d7f6c7624dcc2b82e40adcd52613144dd3d18e1b999995ebb86e809fb9740cbbf6ed7266044de6
SSDEEP

12288:By1mDEG1NM2tcUs0GdaI8UrJ+cKdWVHGsA5xUrvvZ8GUWneATX2zS9mm1eKMm0:B1DrMaxsdp5TKCA5yrOGUWeAX5ZeRx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Activator.exe

Files

BOA.zip
.zip
Activator.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 629KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
History.txt
Readme.txt