a9fc6e2050bfb543e276b1caf2cb58b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9fc6e2050bfb543e276b1caf2cb58b9
Size

3.8MB
MD5

a9fc6e2050bfb543e276b1caf2cb58b9
SHA1

1038b5f5426a69023283f2adb20d3fece0ce644f
SHA256

6f4b34932d1dabd3a148a95194b9f3a3ac4eba2d505b9c80bb5a599a9fecd6fc
SHA512

a1bc124afd230b4efdb75b135cfc9008a67945ffebec10ff4070a056296b9476b894d077815b861e82e33e8154a97c3ecf7a4d5257993eb479355b6b0967423a
SSDEEP

98304:d33M1BetOZ4ZTbVZJmioJiz7WmPZ67fB7QDvVrYACLp:2YtOZ4Z3osHWmPZ/lWLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/zunevideo.exe

Files

a9fc6e2050bfb543e276b1caf2cb58b9
.rar
zunevideo.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url