9868b4cc477b56be153d43308c6d94dc4b8b2bf20846ec1f0e11e29c9e3093d2[.]exe[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

9868b4cc477b56be153d43308c6d94dc4b8b2bf20846ec1f0e11e29c9e3093d2.exe.zip
Size

37.4MB
MD5

79e35ddc6f409b32d2423f881722e022
SHA1

feee184b47f44b1894d4b4f4d04914129c02ea15
SHA256

2338f6d9c6fab7288b02009b0820570a435ee400b2a5b1f6b9ff98a866439e2a
SHA512

8fe8985e63fe7473fe9daad0201d76a469f8a2f68b64b20159f9124b749042ab9f3dbfb05ab043c06b33390f86219f4b5259c7048a19b70a4645df6de2ff157e
SSDEEP

786432:HVjQeA/o78KCOKP4FFZ+kb5dhqrpKe0uyuQlEY6Mgvgl/XH:meA/A8dYFFcQuFQlOq/X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9868b4cc477b56be153d43308c6d94dc4b8b2bf20846ec1f0e11e29c9e3093d2.exe

Files

9868b4cc477b56be153d43308c6d94dc4b8b2bf20846ec1f0e11e29c9e3093d2.exe.zip
.zip

Password: infected
9868b4cc477b56be153d43308c6d94dc4b8b2bf20846ec1f0e11e29c9e3093d2.exe
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 22.8MB - Virtual size: 54.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 4.7MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 229KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 19B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 149KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 37KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.imports
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 15.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.taggant
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

DLL Characteristics

File Characteristics

Sections

Size: 22.8MB - Virtual size: 54.7MB

Size: 4.7MB - Virtual size: 14.5MB

Size: 229KB - Virtual size: 3.0MB

Size: 1.3MB - Virtual size: 2.3MB

Size: 19B - Virtual size: 48B

Size: 149KB - Virtual size: 339KB

Size: 37KB - Virtual size: 443KB

.imports Size: 5KB - Virtual size: 5KB

.tls Size: 6KB - Virtual size: 8KB

.rsrc Size: 41KB - Virtual size: 41KB

.themida Size: - Virtual size: 15.2MB

.boot Size: 9.1MB - Virtual size: 9.1MB

.reloc Size: 512B - Virtual size: 4KB

.taggant Size: 8KB - Virtual size: 8KB

.imports
Size: 5KB - Virtual size: 5KB

.tls
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 41KB - Virtual size: 41KB

.themida
Size: - Virtual size: 15.2MB

.boot
Size: 9.1MB - Virtual size: 9.1MB

.reloc
Size: 512B - Virtual size: 4KB

.taggant
Size: 8KB - Virtual size: 8KB