General

  • Target

    731ef2e3045d0b5d504c59e895aa6eadf9f35885413deff524d8cadd34733ce5.zip.zip

  • Size

    1.3MB

  • MD5

    cfed7e3dfa1a93310dfbb591e203d0dd

  • SHA1

    6786518b5987d72db8cdb05545e48212e58c896b

  • SHA256

    cdcacc06ebf66b3878d24a09ff64fac1b159c9ea8298c5923fd3618178b3af67

  • SHA512

    809e28362fe4bf9c2ce8f1ad6e19315818a3858cc87cda94b0d795278d4dd04233a498b8efb16d7391d2b25f0d055f3b85ced4dc1872f7cbd17fe325a0a2fd55

  • SSDEEP

    24576:ma7WNcptAgUZ5htsuF7u9LHJ18bIEe0Vf73cZu0FKJ:mqWNczARTsia9z75j0+u0FKJ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 731ef2e3045d0b5d504c59e895aa6eadf9f35885413deff524d8cadd34733ce5.zip.zip
    .zip

    Password: infected

  • 731ef2e3045d0b5d504c59e895aa6eadf9f35885413deff524d8cadd34733ce5.zip
    .zip
  • ZinRead/DATA/nodelay.dat
  • ZinRead/FONTS/dos_font.dat
  • ZinRead/SKINS/50JUBIL.SKN
  • ZinRead/ZinRead.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • ZinRead/ZinRead.txt
  • ZinRead/alleg40.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • ZinRead/midas11.dll
    .dll windows:1 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:1 windows x86


    Headers

    Sections