18420985492[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18420985492.zip
Size

402KB
MD5

1e54b4fa498a1c3a99ef2288aaad42df
SHA1

0380538d60865812a43446e96cbccbf75c37772b
SHA256

df7e3dc66824bdc02f767e8b26b1b155f70fa4d9060a03bdde784df3c69d2fbf
SHA512

a7044ddcb579c63a2851bd821f97b224bfb309b70b14705e4c1b74f839e78faf55fbe26bce643c063a0c894b719368591860accb9406a0befb28ca6f6d939e19
SSDEEP

6144:1Lxrqzyc60Ily484C6Ot8kIii9gqdQBBqeyIsQ1Oa3E7U7VBqJwLPB6a2:1VAX6FlV8Dtfhi9xQBBUIxQUDqi7oa2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1bfdcc76f54da2fd6ca78931c348ac25d1e5e43771547e139d7233f07cd7308a

Files

18420985492.zip
.zip

Password: infected
1bfdcc76f54da2fd6ca78931c348ac25d1e5e43771547e139d7233f07cd7308a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ