d5f07ce64ccae30e875a33a324b7bcc21fdf61cda8b0d6498096fdc3d5e67343[.]zip[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

d5f07ce64ccae30e875a33a324b7bcc21fdf61cda8b0d6498096fdc3d5e67343.zip.zip
Size

17.8MB
MD5

56de4f3967c7f6e414192a8ad4b0e855
SHA1

71a3b133418c8eec156cf82b8a15eaac5dc007fc
SHA256

c1d9f640ae1a12fd71ad122fdc3fc7f8b02b6dd85528efba955821bbacb6d686
SHA512

adf46591f300fa3302dcebc7d35557717da91b42dad33bd1933182071c93c72594a479efa3fce1196e43a1f61f906d9a7eacf272cef82c650b6e3cc266a7b4a0
SSDEEP

393216:oRsF0q7rb7sUKTiNjCDqXbHsPOsHj1vsEQElBNKdRjqv/:oRE0csUNjC0wPjJj8jqv/

Score

3^/10

pdf link

Malware Config

Signatures

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack007/101auctionsecrets.exe

Files

d5f07ce64ccae30e875a33a324b7bcc21fdf61cda8b0d6498096fdc3d5e67343.zip.zip
.zip

Password: infected
d5f07ce64ccae30e875a33a324b7bcc21fdf61cda8b0d6498096fdc3d5e67343.zip
.zip
EbayInfoStore/EbayInfoStore-Licence.pdf
.pdf
- http://www.marketingmainevent.com/optin/
EbayInfoStore/EbayInfoStore/Reseller Site.zip
.zip
Reseller Site/images/InstantEbayStoreCover.jpg
.jpg .ps1
Reseller Site/images/InstantEbayStoreHeader1.jpg
.jpg
Reseller Site/images/articlecontent.jpg
.jpg
Reseller Site/images/checkmark.gif
.gif
Reseller Site/images/creditcards.jpg
.jpg
Reseller Site/images/customisableheaders.jpg
.jpg
Reseller Site/images/ebayinforeportscover.jpg
.jpg
Reseller Site/images/ebayinfostorepages.jpg
.jpg
Reseller Site/images/order.jpg
.jpg
Reseller Site/index.htm
.html
Reseller Site/thank-you-page.htm
.html
EbayInfoStore/EbayInfoStore/STORE.zip
.zip
STORE/Store/INFOSTORE/article1.htm
.html
STORE/Store/INFOSTORE/article2.htm
.html
STORE/Store/INFOSTORE/article3.htm
.html
STORE/Store/INFOSTORE/article4.htm
.html
STORE/Store/INFOSTORE/article5.htm
.html
STORE/Store/INFOSTORE/auctionaddesigner/box.JPG
.jpg
STORE/Store/INFOSTORE/auctionaddesigner/ccards.gif
.gif
STORE/Store/INFOSTORE/auctionaddesigner/header.gif
.gif
STORE/Store/INFOSTORE/auctionaddesigner/index.htm
.html
STORE/Store/INFOSTORE/auctionaddesigner/screenshot1.jpg
.jpg
STORE/Store/INFOSTORE/auctionaddesigner/screenshot2.jpg
.jpg
STORE/Store/INFOSTORE/blankarticletemplate.htm
.html
STORE/Store/INFOSTORE/blankdownloadpagetemplate.htm
.html
STORE/Store/INFOSTORE/downloads/BIGSALEPACK.zip
.zip
BIGSALEPACK/101AuctionSecrets.zip
.zip
101auctionsecrets.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 162KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BIGSALEPACK/AuctionAid.zip
.zip
BIGSALEPACK/AuctionExplosion.zip
.zip
BIGSALEPACK/AuctionHints.zip
.zip
BIGSALEPACK/AuctionHints2.zip
.zip
BIGSALEPACK/AuctionProphet.zip
.zip
BIGSALEPACK/AuctionSourcesExposed.zip
.zip
BIGSALEPACK/AuctionTidBits.zip
BIGSALEPACK/AuctionTraffic.zip
.zip
BIGSALEPACK/AutomatedEbaySales.zip
.zip
BIGSALEPACK/EbayAuctionMarketing.zip
.zip
BIGSALEPACK/EbayBasics.zip
.zip
BIGSALEPACK/EbayMarketingSecrets2002.zip
.zip
BIGSALEPACK/EbayMoneyMachine.zip
.zip
BIGSALEPACK/EbayPirates.zip
.zip
BIGSALEPACK/EbayReports.zip
.zip
BIGSALEPACK/EbaySecretsRevealed.zip
.zip
BIGSALEPACK/EbayTheSimpleWay.zip
.zip
BIGSALEPACK/FulltimeIncome.zip
.zip
BIGSALEPACK/GetBids.zip
.zip
BIGSALEPACK/GreatestMoneyMakingSecret.zip
.zip
BIGSALEPACK/HiddenWebBargains.zip
.zip
BIGSALEPACK/HowToIncreaseAuctionProfits.zip
.zip
BIGSALEPACK/HungryCustomers.zip
.zip
BIGSALEPACK/InstantSiteMaker.zip
.zip
BIGSALEPACK/JimWilsonsEbaySecrets.zip
.zip
BIGSALEPACK/OneMillionItemsWholesale.zip
.zip
BIGSALEPACK/PaylockGenerator.zip
.zip
BIGSALEPACK/PowerSeller.zip
.zip
BIGSALEPACK/SecretEbayMarketing.zip
.zip
BIGSALEPACK/UsingNlpOnEbay.zip
.zip
BIGSALEPACK/WholesaleSources2002.zip
.zip
BIGSALEPACK/iNetWholesale.zip
STORE/Store/INFOSTORE/downloads/EIR.zip
.zip
STORE/Store/INFOSTORE/downloads/EbayInfoReportsBonus.zip
.zip
STORE/Store/INFOSTORE/downloads/JimWilson.zip
.zip
STORE/Store/INFOSTORE/downloads/auctionaddesigner.zip
.zip
STORE/Store/INFOSTORE/downloads/ebayfeedback.zip
.zip
STORE/Store/INFOSTORE/downloads/ebayinfo.zip
.zip
STORE/Store/INFOSTORE/downloads/infoonebaybook.zip
.zip
STORE/Store/INFOSTORE/ebayfeedback/index.htm
.html
STORE/Store/INFOSTORE/ebayfeedback/order_button.jpg
.jpg
STORE/Store/INFOSTORE/ebayfeedback/positive_background.psd.jpg
.jpg
STORE/Store/INFOSTORE/ebayfeedback/positive_cover.jpg
.jpg
STORE/Store/INFOSTORE/ebayfeedback/positive_header.jpg
.jpg
STORE/Store/INFOSTORE/ebayfeedback/tick.gif
.gif
STORE/Store/INFOSTORE/ebayinfo/baby_safety.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/baby_safety_flat.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/checkbox.gif
.gif
STORE/Store/INFOSTORE/ebayinfo/day_in_city.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/day_in_city_flat.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/earning_disclaimer.html
.html
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_back.gif
.gif
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_bullet_neg.gif
.gif
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_flat.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_foot.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_head.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_order.gif
.gif
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_order.jpg
.jpg
STORE/Store/INFOSTORE/ebayinfo/ebay_info_profits_order2.gif
.gif
STORE/Store/INFOSTORE/ebayinfo/guarantee.gif
.gif
STORE/Store/INFOSTORE/ebayinfo/index.html
.html
STORE/Store/INFOSTORE/images/amoneymachine.jpg
.jpg
STORE/Store/INFOSTORE/images/aprophet_ebook.gif
.gif
STORE/Store/INFOSTORE/images/auction4.jpg
.jpg
STORE/Store/INFOSTORE/images/auctionadcover.jpg
.jpg
STORE/Store/INFOSTORE/images/auctionaid.jpg
.jpg
STORE/Store/INFOSTORE/images/auctionhints2a.jpg
.jpg
STORE/Store/INFOSTORE/images/auctionprofits.gif
.gif
STORE/Store/INFOSTORE/images/auctionsourcesexposeda.gif
.gif
STORE/Store/INFOSTORE/images/auctiontidbitsbook.jpg
.jpg
STORE/Store/INFOSTORE/images/auctiontraffic.jpg
.jpg
STORE/Store/INFOSTORE/images/automatedebaysales.gif
.gif
STORE/Store/INFOSTORE/images/computer_cash_flowing.jpg
.jpg
STORE/Store/INFOSTORE/images/couple1.gif
.gif
STORE/Store/INFOSTORE/images/createincome.gif
.gif
STORE/Store/INFOSTORE/images/e-news_top.gif
.gif
STORE/Store/INFOSTORE/images/eBay.jpg
.jpg
STORE/Store/INFOSTORE/images/ebay2002.jpg
.jpg
STORE/Store/INFOSTORE/images/ebay_business_success_pacakge.jpg
.jpg
STORE/Store/INFOSTORE/images/ebaybasicsa.jpg
.jpg
STORE/Store/INFOSTORE/images/ebayfeedbacksmall.jpg
.jpg
STORE/Store/INFOSTORE/images/ebayinfoprofitscover.jpg
.jpg
STORE/Store/INFOSTORE/images/ebayinforeportscover.jpg
.jpg
STORE/Store/INFOSTORE/images/ebayinfostoreheader.jpg
.jpg
STORE/Store/INFOSTORE/images/ebaymoneymachinea.jpg
.jpg
STORE/Store/INFOSTORE/images/ebaypirates.gif
.gif
STORE/Store/INFOSTORE/images/ebayreports.jpg
.jpg
STORE/Store/INFOSTORE/images/ebaysecretsrevealed.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/101auctionsecrets.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/amoneymachine.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/aprophet_ebook.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/auction4.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/auctionaid.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/auctionhints2a.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/auctionprofits.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/auctionsourcesexposeda.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/auctiontidbitsbook.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/auctiontraffic.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/automatedebaysales.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/createincome.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/eBay.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/ebay2002.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/ebaybasicsa.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/ebaymoneymachinea.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/ebaypirates.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/ebayreports.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/ebaysecretsrevealed.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/getbids.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/hiddenbargains.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/hungrya.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/inet.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/instantsite.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/jwebaysecrets.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/million.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/moneysecret.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/nlp_ebook.gif
.gif
STORE/Store/INFOSTORE/images/ebooks/paylockbox.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/powersellera.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/secretebaymarketinga.jpg
.jpg
STORE/Store/INFOSTORE/images/ebooks/simple.gif
.gif
STORE/Store/INFOSTORE/images/free_resell_rights.gif
.gif
STORE/Store/INFOSTORE/images/getbids.jpg
.jpg
STORE/Store/INFOSTORE/images/girloncomputer.jpg
.jpg
STORE/Store/INFOSTORE/images/graph.gif
.gif
STORE/Store/INFOSTORE/images/guarantee12.gif
.gif
STORE/Store/INFOSTORE/images/hiddenbargains.jpg
.jpg
STORE/Store/INFOSTORE/images/hungrya.jpg
.jpg
STORE/Store/INFOSTORE/images/inet.gif
.gif
STORE/Store/INFOSTORE/images/instantsite.jpg
.jpg
STORE/Store/INFOSTORE/images/jimwislonsmall.jpg
.jpg
STORE/Store/INFOSTORE/images/jwebaysecrets.gif
.gif
STORE/Store/INFOSTORE/images/lock.gif
.gif
STORE/Store/INFOSTORE/images/manmoney.jpg
.jpg
STORE/Store/INFOSTORE/images/million.jpg
.jpg
STORE/Store/INFOSTORE/images/money99.jpg
.jpg
STORE/Store/INFOSTORE/images/moneysecret.jpg
.jpg
STORE/Store/INFOSTORE/images/nlp_ebook.gif
.gif
STORE/Store/INFOSTORE/images/paylockbox.jpg
.jpg
STORE/Store/INFOSTORE/images/pdf.gif
.gif
STORE/Store/INFOSTORE/images/powersellera.jpg
.jpg
STORE/Store/INFOSTORE/images/secretebaymarketinga.jpg
.jpg
STORE/Store/INFOSTORE/images/shadow.jpg
.jpg
STORE/Store/INFOSTORE/images/signature.gif
.gif
STORE/Store/INFOSTORE/images/simple.gif
.gif
STORE/Store/INFOSTORE/images/star.gif
.gif
STORE/Store/INFOSTORE/index.htm
.html
STORE/Store/INFOSTORE/index2.htm
.html
STORE/Store/INFOSTORE/infoonebay/creditcards.gif
.gif
STORE/Store/INFOSTORE/infoonebay/ebay.html
.html
STORE/Store/INFOSTORE/infoonebay/guarantee.gif
.gif
STORE/Store/INFOSTORE/jimwilson/ebaysecrets2.jpg
.jpg
STORE/Store/INFOSTORE/jimwilson/index.htm
.html
STORE/Store/INFOSTORE/ordernow.htm
.html

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

File Characteristics

Sections

CODE Size: 162KB - Virtual size: 392KB

DATA Size: 2KB - Virtual size: 8KB

BSS Size: - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 28KB

.rsrc Size: 98KB - Virtual size: 100KB

.aspack Size: 5KB - Virtual size: 8KB

.data Size: - Virtual size: 4KB

CODE
Size: 162KB - Virtual size: 392KB

DATA
Size: 2KB - Virtual size: 8KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 28KB

.rsrc
Size: 98KB - Virtual size: 100KB

.aspack
Size: 5KB - Virtual size: 8KB

.data
Size: - Virtual size: 4KB