cock[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cock.zip
Size

247KB
MD5

1283cb6dbd927095a2bfb474aa698da9
SHA1

5eb254e49d130f7b92f74120de0cdde6aea7e239
SHA256

8291da2e3224fef81ec2b6a14a0b5b3e68a7a49e80c1ca12e3439ec7deb69394
SHA512

eee2f73e82d15aee0cc2308c9b86ba91e3b46362b5ffd198836f3c02789f216cbf51e7565abb942a818166ca5c927660056f4c7704cd3233cc774993c3453d34
SSDEEP

6144:VBG2mzxFSZiW8DQl6W5Mrd9RzgxfK0Y+PZbmXoKGNg56L7Xqdv:VBF4FeiOH5ER0xS7+hSXotoFv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cock.exe

Files

cock.zip
.zip
cock.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\VB.NET\MEGA VIRUS MAKER\Backup (MVM)\Last known works DO NOT USE JUST COPY AND USE\Application (MVM STUB)\Application\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ