11367686779[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11367686779.zip
Size

26KB
MD5

be729c37e94e95f10b50dc33c5233b89
SHA1

14770b945f70b4920ab3c576729727e5075fa254
SHA256

f79631d353cb3ca47e10f630db318afda7beae5a6c19c09de1ceb46624b9c8fa
SHA512

7147910edba1919a29ad6a5b94fd4a8fbb57b9d0b3eceb8fbc0cda18dbac2e597cd089dcc79ea86c0e2e0bed7338e3fda49d0dad58c49d11bd29dbf94ed28e7a
SSDEEP

768:9frZX4NaSXrtIYJy/ojdmfGvr0T9ODkYnNWmKV/5I4CDMGibh4ScT:hVXpSu9ojwfGvr0TgkYN+K4CXidcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a08ff58aa819f5b9668f2f6e7a262cb0e89846c085a12f0e6c143e7d787ae87b

Files

11367686779.zip
.zip

Password: infected
a08ff58aa819f5b9668f2f6e7a262cb0e89846c085a12f0e6c143e7d787ae87b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ