General

  • Target

    RoamingWind.exe_pw_infected.zip

  • Size

    4.6MB

  • MD5

    f20a254dfedb9ec61478b333e83424e4

  • SHA1

    495c94babbf1abae23432903863667160bf82ab2

  • SHA256

    f8de8bcc0f367969d6c6c945a96f4216d9faebd6744a3f0bdaadeb44202c06e4

  • SHA512

    8fffd65189a4dfc607afdf277e269cec535796055d7976a52fef07f5d88852ba31831d2daea69276bf5f86c54e7e553cdf8310eb2ea62be18a26d7cf0ae8f0ed

  • SSDEEP

    98304:+zEjbqc8Tm4b1em/3SC6TvKJbSU3vz7DLS+0xo9Bg5MXMM4x:GEic8vbp/uChSMbLSe9eWXM/x

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RoamingWind.exe_pw_infected.zip
    .zip

    Password: infected

  • 0x000100000002ab26-10
    .exe windows:5 windows x64 arch:x64

    e8a30656287fe831c9782204ed10cd68


    Headers

    Imports

    Sections