zzzzz[.]tgz[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

zzzzz.tgz.gz
Size

938KB
MD5

e56f3d98d37012fd59c83add484d7e2e
SHA1

0e4d2bd4d7135542984a2c54a92f8ee56ed55388
SHA256

1c32e21ffc3850918c6807a42a70ee00b13d4ec2bd1b76ab8df9861a74993ee7
SHA512

bb45683c566410c0679090b9b8eb0ca7e3b30f5b6d03dee00c995cea89bde669627a4d3f69f5dc9deeb1d6d73930753a13ed1fb44f8c95ca61ce2ca6e872eb5d
SSDEEP

24576:Hy4PUypTast47IKSLTjHY0H/At8u7DatGeGoXS:S4Xt40KSnjHK6uKtYoXS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/RFQ_4910000042100004550.exe

Files

zzzzz.tgz.gz
.gz
sample
.tar
RFQ_4910000042100004550.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ