14570526413[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14570526413.zip
Size

211KB
MD5

c92cdfaa64ced78ed84d1758cbdd20c9
SHA1

6bf12464309619b5e8da400976d10f07e5c180ef
SHA256

e7b6c1eb92b50abef115234656ad29e02992a46245167b589356911266f0c7d3
SHA512

885c002a76a37a6f7137a539398ae1092fa2a36fc0bdd167ee61648cc8c969837c69938143d0442b4e3445907d009fd80af9e16d0674dd9f0480761a782bd201
SSDEEP

3072:MtnWsqnEyP6dG9rRdBzMsgA1OSFVu+r5yEoYFMuSuXlkzkcDDBWze4bSoGUDEfxL:FLEY5nZlu+rQEMuSDtBWWUDE5BFpRH3H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f724a99f22931555b6f41013f865601c8561ea7e9273630dda7c66f870bc65fe

Files

14570526413.zip
.zip

Password: rMg523s
f724a99f22931555b6f41013f865601c8561ea7e9273630dda7c66f870bc65fe
.exe windows:4 windows x86 arch:x86

Password: rMg523s

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relow
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ