Zip[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Zip.dll
Size

574KB
MD5

236b0a6c8f0d3de70249fdcdf2b91939
SHA1

b9e5ef2f7fe04f8e4a3843c217b999bdfce7ba2f
SHA256

d18c4238b8baf566cf02b9cf331f44657fc001d0e04187042a22bb54da296687
SHA512

7868ae68fdc364783e029a9f5f8d72ea44b32e4ac739771762b021729da41b102e9812ce4aed9453608326a5b25376aa22e86a9d3e2fac7a7b27112f266807a0
SSDEEP

12288:EIeqQ+1SLZ91f5OsT7V89v8jTUfowFNyk+wi:V6DZXfxd89vOcFNd+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zip.dll

Files

Zip.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

UnZipFile
ZipFiles

Sections

CODE
Size: 491KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 101KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 87B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ