606_ec5a351c91e0df48671f49e5601f0ebcf5885dba6fb3b4f574763f7460731fb5[.]zip

General

Target

606_ec5a351c91e0df48671f49e5601f0ebcf5885dba6fb3b4f574763f7460731fb5.zip
Size

5.9MB
MD5

720806e2de3738509e2bfca538780c9c
SHA1

5ca07141c930525914650709dbc225be61363004
SHA256

225350dea9c75268a6c75a366dd517fb3498f7a4b722559c79b017fe0bf872d5
SHA512

5bad02256461ea21551ca5fd0d1c1d023d96ebdd8a164232ffe7b111620d6a5d8c568e07543289e4bdb3eebe0d0d867b0daf53f642a704e3475bf284a0d14fbd
SSDEEP

98304:l/HpIxwapqKRFX2yDqC34OzGuB00k2zLvvcS0ceshj9/lK4K4PYOAr6mD3y8tfCD:l/Hmm6FX2yDeKrLPq4PYRr663rtKHRX

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ec5a351c91e0df48671f49e5601f0ebcf5885dba6fb3b4f574763f7460731fb5

606_ec5a351c91e0df48671f49e5601f0ebcf5885dba6fb3b4f574763f7460731fb5.zip
.zip

Password: infected
ec5a351c91e0df48671f49e5601f0ebcf5885dba6fb3b4f574763f7460731fb5
.exe windows x86

Password: infected

e4a080fe3824aa611c56562a3d9167ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

ole32

CoCreateInstance

oleaut32

VariantInit

crypt32

CryptStringToBinaryA

user32

CharUpperBuffW

Sections

.text
Size: - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..zip0
Size: - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

..zip1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..zip2
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ