DESKTOP-D55OAVN[.]zip | Triage

Resubmissions

27/07/2024, 10:48

240727-mwkpcsvhkq 7

27/07/2024, 10:45

240727-mtlhwavgjq 7

Sharing

Copy URL Twitter E-mail

General

Target

DESKTOP-D55OAVN.zip
Size

2KB
MD5

a73db0441f3495c1de8624d95bd3a057
SHA1

c4f3c63097b255ebdea0316cce3756d60bfe33a0
SHA256

6aa8f921746974fda16f02df85d4ea58345ea14d9df088368f59053c793aa290
SHA512

e6a10c5d433009b0ef1984879ed8cdefcf589cc4929af84e64a5d3fb5d2c5335eb9f756b31811a16feda8336cb1adc0750169a53ebfd7518b99a9696d4de7673

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/_WABM.init

Files

DESKTOP-D55OAVN.zip
.zip

Password: 1111
_WABM.init
.dll windows:5 windows x86 arch:x86

Password: 1111

eef941bf442aa3dad0f50a640a74e1a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

shell32

ShellExecuteA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

krnl

Sections

.text
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ВМПЗ_ЗГ (58GB).lnk
.lnk