11611400426[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11611400426.zip
Size

1.5MB
MD5

258b23a934b896cd936e253da84c1323
SHA1

fb7322f8e25687a015aa231200fa3410ef749e95
SHA256

ce3ce539709cd98ad93c867b9a338df0d4c1b4d529c9d9cc161a4c29bba0ff65
SHA512

97b736f1addb5ff3a42a4ee1a116edb4f5847178c6f78169a66f5f71dc454b7eaa84543a66ceae4bcb43bfa64e71467df0560d26f8902b21c3bbeb5567ee69f1
SSDEEP

24576:LRQos0g/xgksMCYnOPrEFuWj617PwDcTpKoQdoWBSy7QY7rcdjggz6PMUQ+:1PmNpOPr8uW0NTUoq5QmrcNreb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6c4668ce982364d375e50e9046a5d2aafcf76c9abd591217bebbcb983131c839

Files

11611400426.zip
.zip

Password: infected
6c4668ce982364d375e50e9046a5d2aafcf76c9abd591217bebbcb983131c839
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ