52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a[.]zip

General

Target
52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.zip
Size 235KB
Sample240305-19exxsbb4y
SHA256 7d8ca387f50a58ecb5feea1280fd5ec7eec19152a5244f1c2336ff9f08c78912
MD5 b3a7be5b92cfe268e189385b4273955e
SHA1 93a1b4180d09e3fa791c233034ec256265b2c13b
SHA512 d6d16417f7c7b3f2cce2297efa80eade30579163ff662ae7369f85daa721eaf8911d6216872791700897b6a8ccaffe4d4b921283e4159e4e9ecc97f1f5a6f0e5
SSDEEP 6144:p09UCVV/W3ss7fUw5BJc0qu1Nl9ah8c11dwsnUjWEhMJzZqzyn:Mps7l5RC6suWEJz0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe

File Explorer

52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.zip

.zip 235KB
52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe

.exe 355KB

52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.zip

SHA256 7d8ca387f50a58ecb5feea1280fd5ec7eec19152a5244f1c2336ff9f08c78912
MD5 b3a7be5b92cfe268e189385b4273955e
SHA1 93a1b4180d09e3fa791c233034ec256265b2c13b
SHA512 d6d16417f7c7b3f2cce2297efa80eade30579163ff662ae7369f85daa721eaf8911d6216872791700897b6a8ccaffe4d4b921283e4159e4e9ecc97f1f5a6f0e5
SSDEEP 6144:p09UCVV/W3ss7fUw5BJc0qu1Nl9ah8c11dwsnUjWEhMJzZqzyn:Mps7l5RC6suWEJz0
MD5 SHA1 SHA512 SSDEEP

Password

infected

52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe

IMPHASH be49a2411263045f8ee0c442783b5f83
SHA256 52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a
MD5 3347325a293ac4af7eddaa3f46580b93
SHA1 1c650aa9951ea05b4ba5c56520dd30ce889cc319
SHA512 83355884c60abeb5c66a9eff60d72648d563c372cc36e9e7ff9146230244ab93ad0c5b353c81e1819870b45e09a8ba6cc7a1ad4aa8b81a56310c5a44317742a2
SSDEEP 6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqgsb:gf2R/EEkCQFYDwRq7
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

6

Entry point

329934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

320KB

Virtual Size

320KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1000B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

236B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.zip

52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe

kernel32

user32

gdi32

ole32

msvcrt

generic

Sharing

General

Malware Config

Signatures

File Explorer

52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.zip

52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe

kernel32

user32

gdi32

ole32

msvcrt

generic