Zaplata[.]jpg[.]img

General

Target
Zaplata.jpg.img
Size 1.2MB
Sample240617-wcdalssapp
SHA256 0343b65d72d6de7e249af0cdf3c5531982b1aac457a758bf2948bd56a2cd63e9
MD5 1f0357047217a540767f21466dd5ab66
SHA1 c30fb230004f53cfea793824676df56ddd8fb272
SHA512 750b20afcf522bf9cd2bbae961cb6722eb5f4e6e53f9a9672426cc0257eb29dc245b5bdea23f86a7fd7f0a8a5d758c0a7faefe2bea7115f163c477db38274390
SSDEEP 12288:kuFFZ6BKGu3ZAJ7ECGVEJIhlu4gvSD3tYE/B:F6BKGW+EV+/4bYE/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Zaplata,jpg.exe

File Explorer

Zaplata.jpg.img

.iso 1.2MB
out.iso

.iso 1.2MB
Zaplata,jpg.exe

.exe 561KB

Zaplata.jpg.img

SHA256 0343b65d72d6de7e249af0cdf3c5531982b1aac457a758bf2948bd56a2cd63e9
MD5 1f0357047217a540767f21466dd5ab66
SHA1 c30fb230004f53cfea793824676df56ddd8fb272
SHA512 750b20afcf522bf9cd2bbae961cb6722eb5f4e6e53f9a9672426cc0257eb29dc245b5bdea23f86a7fd7f0a8a5d758c0a7faefe2bea7115f163c477db38274390
SSDEEP 12288:kuFFZ6BKGu3ZAJ7ECGVEJIhlu4gvSD3tYE/B:F6BKGW+EV+/4bYE/
MD5 SHA1 SHA512 SSDEEP

Zaplata,jpg.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c5425d62c01551e1c243ed453bf14d0b51ad7e890d59ef469c5b9418bb6361a0
MD5 6f9e931132ed53e111a1d022395a5b7d
SHA1 aba94805466d7a2ae0f5be485d3f9930430e1f4b
SHA512 45c40fd55594f99bd120f5f150f9dca8e59147f8407d5270464d122a7aa7385d42dcfde721fa931ad7b9cc32ce076e3e037d14bfda7e8149375dfa8b1d1f0c0b
SSDEEP 12288:OuFFZ6BKGu3ZAJ7ECGVEJIhlu4gvSD3tYE/B:76BKGW+EV+/4bYE/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

570970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Zaplata.jpg.img

out.iso

Zaplata,jpg.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Zaplata.jpg.img

out.iso

Zaplata,jpg.exe

mscoree

dotnet