!@File-Downloader_PAsw0rdZ_2024[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

!@File-Downloader_PAsw0rdZ_2024.zip
Size

1.8MB
MD5

8e650f1c37ad904a70467f60332cb7f4
SHA1

282f31e871b2c9726d1dc9bc0e435bf9fc22c8fd
SHA256

0c58df24d06435949e0e68a5638a8f8368752725727933938b3ffc46de9800c1
SHA512

145c86b477ff7cfb682b0de41958cf816c748278bb8c2dbe23a931c188869df9600d138f22e17783960d08401098c44bc851cd20c96860b89568cde9076229b2
SSDEEP

49152:Rd5xjDJMMEz9ur5Y9JQaFgeQkGfx9ZkiuVfrofNepY6k:Rd51Nwpure9Nglfx0ZVcfNew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Setup-Full-File.exe

Files

!@File-Downloader_PAsw0rdZ_2024.zip
.zip

Password: 2024
!@File-Downloader_PAsw0rdZ_2024.rar
.rar

Password: 2024
Setup-Full-File.exe
.exe windows:6 windows x86 arch:x86

Password: 2024

48d4a6a3111a18b082fa3638b1568f64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3Kw
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.I0Y
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.G8v
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ