361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c[.]zip

General

Target
361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.zip
Size 1.2MB
Sample240402-mkec7sfd73
SHA256 96dc94ce5d32ff6cc08fa84a897464790b262c341f37c6a795fd21eed352d3fb
MD5 239cc793c90c1fdc38cf2143355ec4f2
SHA1 26e43131172db45e576c2650ab1792995dc9129a
SHA512 50722e3596dadf33933291ee9d1219797f66ad5385898fc7095bf841245b12ebb000e4c101aa72382efb9344b512fcdd19bbc0f4b027d20690efb223c75804a0
SSDEEP 24576:SeDquBTjNL38yoHE18kS/ByfOeRAZJfA59CYVmtkIe8EkXCK:RryHbZEOcKYAtTwo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.exe

File Explorer

361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.zip

.zip 1.2MB
361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.exe

.exe 1.3MB

361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.zip

SHA256 96dc94ce5d32ff6cc08fa84a897464790b262c341f37c6a795fd21eed352d3fb
MD5 239cc793c90c1fdc38cf2143355ec4f2
SHA1 26e43131172db45e576c2650ab1792995dc9129a
SHA512 50722e3596dadf33933291ee9d1219797f66ad5385898fc7095bf841245b12ebb000e4c101aa72382efb9344b512fcdd19bbc0f4b027d20690efb223c75804a0
SSDEEP 24576:SeDquBTjNL38yoHE18kS/ByfOeRAZJfA59CYVmtkIe8EkXCK:RryHbZEOcKYAtTwo
MD5 SHA1 SHA512 SSDEEP

Password

infected

361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.exe

SHA256 361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c
MD5 48bf3772cbc93109287d1254b8a64683
SHA1 7ba5be5f07d63597c71bdfc0032365b56a3a26e7
SHA512 d3621ed393be35d7a0074aee36d7ab1e7df9dacb86085472c8ed0cceec03e0bd2b349b9216bd3b8f1c19f9b1f112e255245d38ad32106d0e47a92e27ebe41d15
SSDEEP 24576:Nmmy8RvF09ha/j20zJgxHgShHls6P9eQ7FYxM8/ta081:N/y8RvK9Q9B76PZ7GxM8/tJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

37839

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

85KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1024B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

115KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

175KB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

908KB

Virtual Size

912KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.zip

361b53f4b3e887b963bd607d994f9f42344b39e871b1142c8e56ff7182e4c96c.exe

generic