VirusShare_3b9fa46d89fd099e914d6275cac9171f[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_3b9fa46d89fd099e914d6275cac9171f.zip
Size

739KB
MD5

b9aac881052a05803320db24266affb0
SHA1

8279db52ecc98b124e78e3589c253edf93c16ac9
SHA256

721d7096a16b1b019dfc241a3ca6bec2af556512a26ca4f3a0201d1130d933a7
SHA512

49bf29599a198ee7ce956dabaa85d41c1c5e3dba0cccd7bf3d78dd4f8a38da736dd0cf0f26537da16bb8b37644e08c88172c78932bb169081b169da344ce4a04
SSDEEP

12288:5EBDOcNoKXNnDvoa9WiK76o2IkdR86kNKHH87TdfMU9BBIXH2AwksfcRq5W4aAxr:5Ep1Fboawf6oRknGNr7TdfMYqXH2AwkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/042889c7d19b1c7aec30d171c1e147953907146ff5eb81e3bfc29ca83e962658

Files

VirusShare_3b9fa46d89fd099e914d6275cac9171f.zip
.zip

Password: infected
042889c7d19b1c7aec30d171c1e147953907146ff5eb81e3bfc29ca83e962658
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ