66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5[.]zip

General

Target
66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5.zip
Size 494KB
Sample230912-sdzy8adf2x
SHA256 138af5f38175042d7d588cdd54b33bf34eb342ff0424ab80e8cc10d87afd3b9d
MD5 f2dec70b13a30a39493641deb4a75a1d
SHA1 3b006b4b2b533efa59e87235eb2eaa677bfa6e6b
SHA512 b4885eeed7a7026e58774f5f01776b23aed80198652700ad1e70e7f832553e82d6eaf73f28a6734742d460152bf8827ca290c22b0dcc05d1b1a4700cbc12dad2
SSDEEP 12288:8CRiX1DhQZ/kgpuANSZH5FYY6IYqinC4ZaKKe3w0WZIXyk/NdmYu:WX/QZ/wAeYYhQnCYKe3zwayQNkx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5.exe

File Explorer

66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5.zip

.zip 494KB
66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5.exe

.exe 594KB

66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5.zip

SHA256 138af5f38175042d7d588cdd54b33bf34eb342ff0424ab80e8cc10d87afd3b9d
MD5 f2dec70b13a30a39493641deb4a75a1d
SHA1 3b006b4b2b533efa59e87235eb2eaa677bfa6e6b
SHA512 b4885eeed7a7026e58774f5f01776b23aed80198652700ad1e70e7f832553e82d6eaf73f28a6734742d460152bf8827ca290c22b0dcc05d1b1a4700cbc12dad2
SSDEEP 12288:8CRiX1DhQZ/kgpuANSZH5FYY6IYqinC4ZaKKe3w0WZIXyk/NdmYu:WX/QZ/wAeYYhQnCYKe3zwayQNkx
MD5 SHA1 SHA512 SSDEEP

Password

infected

66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5.exe

IMPHASH 7e5590227ad3aecb2feedda5da4da1cb
SHA256 66535813e58e078c4a56c502b6536725080aef5f17abf62f57348a574caccaf5
MD5 b397d94493a37c789647bc3d17fa6920
SHA1 bd7dabb5c87e9e80160f6da942bfd26849e8494a
SHA512 67428108465513a9d2b0f62c18a78e20e2b0204beeedd95a948b8587d8bc4d61371158197754fd61fdffb0648f54a9e884fd4f7a4e0629f30654da8ba0ed11b3
SSDEEP 12288:zGOWNipODV+gjelTCvc8AtzkvkBFJaC/p5lakvyKmUlZ2j:zGOZYVFjelWkBwv6bp1vcUe
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

32832

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing