spam20[.]zip | Triage™

Resubmissions

08/12/2023, 11:29

08/12/2023, 11:20

31/10/2020, 11:20

Target
spam20.zip
Size 245KB
Sample231208-nlsgwsbd65
SHA256 81ea4700e1743391fa6b56be2969c944c8451ec81215f7a0cbf88537e4108157
MD5 68dba7849a17cedd2a01d83747361977
SHA1 38ed165a12de392dce2ef71b1d03accb59add386
SHA512 5bfed6c349a06f1d674a85a1d4343a7096ff97b400ad53347c44b7753c97a219f9207aedffcf7b7947fdbfddc7c2f63b6c48ce19fe91212684d06a91cfeaeff0
SSDEEP 6144:Me8V9G8P+JAfrJ1sdmO9ieKxY/c3GvCLCe74TIa:Me8Vk8P+JSsALeKxY/PvCj7Ta
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/spam20.dll

SHA256 81ea4700e1743391fa6b56be2969c944c8451ec81215f7a0cbf88537e4108157
MD5 68dba7849a17cedd2a01d83747361977
SHA1 38ed165a12de392dce2ef71b1d03accb59add386
SHA512 5bfed6c349a06f1d674a85a1d4343a7096ff97b400ad53347c44b7753c97a219f9207aedffcf7b7947fdbfddc7c2f63b6c48ce19fe91212684d06a91cfeaeff0
SSDEEP 6144:Me8V9G8P+JAfrJ1sdmO9ieKxY/c3GvCLCe74TIa:Me8Vk8P+JSsALeKxY/PvCj7Ta
MD5 SHA1 SHA512 SSDEEP

Password

infected

IMPHASH 83cf26ff3548456dc06a6d6d0227db78
SHA256 c55e3938e9c2c9d00235d8ed87a55adc18fa1c6377a9ee0fd6212916c67d0020
MD5 6501006a6d47bc73976db9f3385c3c46
SHA1 53082a7fa62dc4fe54586df6a6e481fe8beca1aa
SHA512 df63e60f12d153e16b78464162dbd5d052192a1e09814eb91e21d28256a652ae04eb7ccdaf4022c95c9779edfbe15df7a708717a1c247cfe2d16e8d9f911bf0c
SSDEEP 6144:091kAIgU+wK4UrePimd2jGZFakdU8fLx1tK7IwyBfb7T0Y:090gUQe6dUFHU8pi6xb7T
MD5 SHA1 SHA512 SSDEEP

Password

infected

Minor OS version

Major OS version

Entry point

100529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths