10693816043[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10693816043.zip
Size

1KB
MD5

6638e7bde6b052b6afd51fdb5792c71e
SHA1

414efae0589de26a6ded3e1e1f9a12c3e328b1ca
SHA256

7a7640eec53342dd435954c1e7d431192d70403a5800d5ca03c719657aeb836c
SHA512

4bc3ddf1fe25a98bb66952ef95e4f14d5178e5f16c4bd6a3cb62198f96c0eeaeb9532a056fb78ccc9b5be592ab4e5395eebc6c3c01efe20744dec031ff6f314a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1285aa7e6ee729be808c46c069e30a9ee9ce34287151076ba81a0bea0508ff7e

Files

10693816043.zip
.zip

Password: infected
1285aa7e6ee729be808c46c069e30a9ee9ce34287151076ba81a0bea0508ff7e
.exe windows x64

Password: infected

c60aaec0ee2a8549b27da087c3f0d77d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
Sleep
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE