ap-file-adjprog[.]exe--180422628[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ap-file-adjprog.exe--180422628.zip
Size

2.0MB
MD5

af6a08adcf38b70837d76180f5e8b41d
SHA1

7cb587c1e54fabfbb4dd2383764e005372878e33
SHA256

9aeb3d9cffa829a20547b104d50c08a8ce7f60b064877aa0fa75e3066156e7fb
SHA512

48b6f8f802c42e80f5a280609943629b88bc04244869f56e4edb0d34725bdf905a2bbd50d877a52d8d4720ba91cab5595aea54ee7cdfd155f84a5149c148f376
SSDEEP

49152:CT+bctJoxGLFnaYAiVumnHNAS2T8EqH/bKnt859OuD/rk10GJs5CBJfZK8xJZ8rB:XbctJoxGRaYAiVVNA1gbKntmdrY10GKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/adjprog.exe

Files

ap-file-adjprog.exe--180422628.zip
.zip

Password: cautionhandlewithcare
adjprog.exe
.exe windows:4 windows x86

Password: cautionhandlewithcare

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 744KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 144KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 24KB - Virtual size: 9.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 24KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 176KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 980KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adjprog.exe.METADATA