General

  • Target

    Office 2019.zip.zip

  • Size

    12.3MB

  • MD5

    b4649424bb3960ff0c1e2ccc9d3842b4

  • SHA1

    08bcd4008e17f039e6398dc10199f921f2a9c095

  • SHA256

    45426b127a105c012b8cb9d4232f31ab11765b2343fb913be1ef85040ac6bf83

  • SHA512

    cc6c97971d46a7a3dcae80110ff554b80bde35e95c867bd055b177eabc0fe1583b97250f0f4b8087b0d505d0a508d0ec292c591e91307a93c55b2b892a2bc6f4

  • SSDEEP

    196608:wc5AE3BJ+7lwFy5TteE4PBN1zBf32BwxeDKHQLoyKuRBlyTZqob6LS+iSdNxFf+i:wcbkl75SVGwgKKKld03hRF

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Office 2019.zip.zip
    .zip

    Password: infected

  • Office 2019.zip
    .zip
  • Office 2013-2019 C2R Install v6.4.4/OInstall.exe
    .exe windows:4 windows x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections

  • Office 2013-2019 C2R Install v6.4.4/files/Configure.xml
  • Office 2013-2019 C2R Install v6.4.4/files/Uninstall.xml
  • Office 2013-2019 C2R Install v6.4.4/files/setup.exe
    .exe windows:5 windows x86

    ecc0a4d1594b4f4dd175adbdf5d53fe8


    Code Sign

    Headers

    Imports

    Sections

  • Office 2013-2019 C2R Install v6.4.4/files/x64/cleanospp.exe
    .exe windows:6 windows x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • Office 2013-2019 C2R Install v6.4.4/files/x64/msvcr100.dll
    .dll windows:5 windows x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Office 2013-2019 C2R Install v6.4.4/files/x86/cleanospp.exe
    .exe windows:6 windows x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • Office 2013-2019 C2R Install v6.4.4/files/x86/msvcr100.dll
    .dll windows:5 windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Office 2013-2019 C2R Install v6.4.4/readme_en.txt
  • Office 2013-2019 C2R Install v6.4.4/readme_ru.txt