799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81[.]zip

General

Target

799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81.zip
Size

342KB
MD5

43aec3792b3670517a60f06e1a35d883
SHA1

f01930a8d85223957074809fe3551de45afa7eed
SHA256

6a26b812c8b55242794b25a6648bfcc11c82bbe84efce2a3385283f2ef2d2312
SHA512

8f07f76dcebc922b72b74b835daac0556afe7f0a91071804b2ef103048082b1c8a92b3b493dd511bf74506b690d7805931919da0231c8ba16265b57f586a3ec6
SSDEEP

6144:lRZUzR+4v02h7uab/SKhqmwLU9MildbcY1XuR05pO9/RPQBQMMt/wqmVaP:lrW+uM26uq7Tild44+R0+/aQMWYqsaP

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81.dll

799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81.zip
.zip

Password: infected
799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81.dll
.dll windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ