ZipEncryptFTP[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZipEncryptFTP.exe
Size

52KB
MD5

871534570f043e2cfa8fa250e87f9e4f
SHA1

fdb289330f557891f32ca764719ed6d891336c3a
SHA256

2671d57a68a32bfd44ee9da11f7545bb36b3ce96a9c32100d538edbe474ca185
SHA512

2ea2dd6d436c748f28c5f4ee73b14b70b14ef258549350c571bf5fa8189f43618aa0e9d30fba6d56986be7538a7c0eff4a079cf7ca8f3f4040396dab1ad95f98
SSDEEP

768:ZL9oQEZfiXYMvXyuk8cI+KaRFArI9tAlo0qM/y/EyYk:ZL9oQEZfi9jB+FDAI9IqM/A3Yk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZipEncryptFTP.exe

Files

ZipEncryptFTP.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ