secrets[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

secrets.zip
Size

24KB
MD5

3dee140fe380c319682362efca896351
SHA1

7a1615d9c2cc08d7816c9296e009657d0c3d2c8e
SHA256

3cab62b460296e8efd05ce1037316e803572aa4d44abba7b8587c69300fa6ccc
SHA512

97ea790a26986eeb89eb9fdb34e149cd615043fac5ddc646a6371900081e16f2e67dbc88393fbce3b355937f230bc9a822c555040179ae1a084fe387ec16c42e
SSDEEP

768:hkU46BWNXm/qDy3EJLvWGNk+pg9RakWFsy+2:2QWN7y3QLPfg9R0F3+2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/secrets.doc.com

Files

secrets.zip
.zip
secrets.doc.com
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 21KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE