Virus[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Virus.zip
Size

1.1MB
MD5

c3276ef0941a20da1479f1a8f77803fe
SHA1

8ac0a7723f7667ae91eb4fa3d468a7d3ee446bf5
SHA256

31e69835300cbbd562d8f9ff7fcc90f4b1b38af96277f670c59a754e5e03b341
SHA512

91a53076a8b461ebfeb7cbe70c5e3441706b9a32111d39222c693031bc9fd68c49a1fcbe76d3f4b7b29112c2e0fc8228ffb95b2d62c3b140e5363ca844d8ef8d
SSDEEP

24576:Qw3Ej1dTAtWf8bqjPnxP/g8RXGwPeqxThosG/ia23cpPUWx7r/T:9321JAt88InxAhhsTagUP71rL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b7bb267e02a89a24bb8fa77d1a8c56195dd67c737dc6208ce0a27fe8d43fbf66.exe

Files

Virus.zip
.zip
b7bb267e02a89a24bb8fa77d1a8c56195dd67c737dc6208ce0a27fe8d43fbf66.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 193KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc++
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsp
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jmgkcst
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

chhvrnu
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vyulyfs
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lfpkoti
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hieolru
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xjwqout
Size: 4KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 193KB - Virtual size: 408KB

.rdata Size: 17KB - Virtual size: 60KB

.data Size: 3KB - Virtual size: 100KB

.rsrc Size: 4KB - Virtual size: 88KB

.vc++ Size: 82KB - Virtual size: 84KB

.adata Size: - Virtual size: 4KB

.vsp Size: 26KB - Virtual size: 28KB

jmgkcst Size: 111KB - Virtual size: 112KB

chhvrnu Size: 127KB - Virtual size: 128KB

vyulyfs Size: 127KB - Virtual size: 128KB

lfpkoti Size: 135KB - Virtual size: 136KB

hieolru Size: 125KB - Virtual size: 128KB

xjwqout Size: 4KB - Virtual size: 248KB

.text
Size: 193KB - Virtual size: 408KB

.rdata
Size: 17KB - Virtual size: 60KB

.data
Size: 3KB - Virtual size: 100KB

.rsrc
Size: 4KB - Virtual size: 88KB

.vc++
Size: 82KB - Virtual size: 84KB

.adata
Size: - Virtual size: 4KB

.vsp
Size: 26KB - Virtual size: 28KB

jmgkcst
Size: 111KB - Virtual size: 112KB

chhvrnu
Size: 127KB - Virtual size: 128KB

vyulyfs
Size: 127KB - Virtual size: 128KB

lfpkoti
Size: 135KB - Virtual size: 136KB

hieolru
Size: 125KB - Virtual size: 128KB

xjwqout
Size: 4KB - Virtual size: 248KB