Part-001[.]zip | Triage

Resubmissions

09/01/2024, 22:30

240109-2ewgvsabbp 7

09/01/2024, 21:15

240109-z3wresbbd2 7

Sharing

General

Target

Part-001.zip
Size

58.3MB
MD5

606220d6516a5e3d7ab29679e6276030
SHA1

f49d05b79f809bed8d1a8821a6878d0e54249438
SHA256

a249501f6d8b5997862f6144c79c659b46a1b55648fbe4802a400cc0e6d1b5b9
SHA512

c1fc8d10b63e5c0dbdc3a52fcf389d9511c5f6ed6612200b416762f434af3332088d04e97ad25374dce706dc47a50100a07148cc797dc9580e82a4c847254f1c
SSDEEP

1572864:72w1ZQnu8maBuVF3pwy2giyqhQsGqgJ1+uv0PTYqYFhR:72ubf73+giyqhQsdgL+uvoTBKR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Part-001/WFDownloaderApp-BETA-64bit.exe

Files

Part-001.zip
.zip
Part-001/Charlie.txt
Part-001/WFDownloaderApp-BETA-64bit.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ