12906646634[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12906646634.zip
Size

75KB
MD5

13fa9a18d60b95e7d11bbdb54782f431
SHA1

973983cfb10974e6537fbe90efde0ac51c158a26
SHA256

e18cd17eb936c9ea77df4c3c4f164c81a8b20f857c91884a88e7473a13699cbd
SHA512

336b7b25ed62bf24c742592701b768a4652686e3eaef622a8f8c9ee58cfb9826e533a75da0a9ce13f5fde390eef81842edecb8d453382a914c30aeb309b08497
SSDEEP

1536:Pcg4gjGTMpLEWs+jPTwOB89CFDmsjXhyWEJjUmmISdM3TBZztDFoznH:PcgKTMwWM6DmOXz2jFnWMdph6r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bae9aa27c30f8258fabb7c3ba12010725acac3f6b1622cf4e6e4fb02a74f8aec

Files

12906646634.zip
.zip

Password: infected
bae9aa27c30f8258fabb7c3ba12010725acac3f6b1622cf4e6e4fb02a74f8aec
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

Size: 88KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE