bfe9a386eb32f475de892c11461c27f9[.]zip

General

Target
bfe9a386eb32f475de892c11461c27f9.zip
Size 1.1MB
Sample240831-geavyaycre
SHA256 fa0c60e89e90fb93f3b4057b8985e0d114e8367ef33ce90379d36e477dcef74a
MD5 a291e75a3353a4c4fae5889676cd1a3f
SHA1 d4ac0c87d594578a0a27a4e590cc7e2ee852e0a9
SHA512 fc953d44cf6320c6dc2c5f9aecde94d9c406c72e554de0b9f315f024f4721c87df67f3310d817934d7c52284827a0aabcf3ca5921d2b9f2c7c8d8d45295c4c03
SSDEEP 24576:hHsDDzGmjtRhcJCHJ23apIOISQj3Ym0Fm610WRhQtPzxbMWRNey1/4:hHyG2t7I359PYPs6GWsRKwQy1/4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/aa6824d7556f502756865c7ba66061b8b20027671e8669599a4428c78d542de4

File Explorer

bfe9a386eb32f475de892c11461c27f9.zip

.zip 1.1MB
aa6824d7556f502756865c7ba66061b8b20027671e8669599a4428c78d542de4

.exe 1.1MB

bfe9a386eb32f475de892c11461c27f9.zip

SHA256 fa0c60e89e90fb93f3b4057b8985e0d114e8367ef33ce90379d36e477dcef74a
MD5 a291e75a3353a4c4fae5889676cd1a3f
SHA1 d4ac0c87d594578a0a27a4e590cc7e2ee852e0a9
SHA512 fc953d44cf6320c6dc2c5f9aecde94d9c406c72e554de0b9f315f024f4721c87df67f3310d817934d7c52284827a0aabcf3ca5921d2b9f2c7c8d8d45295c4c03
SSDEEP 24576:hHsDDzGmjtRhcJCHJ23apIOISQj3Ym0Fm610WRhQtPzxbMWRNey1/4:hHyG2t7I359PYPs6GWsRKwQy1/4
MD5 SHA1 SHA512 SSDEEP

Password

infected

aa6824d7556f502756865c7ba66061b8b20027671e8669599a4428c78d542de4

SHA256 aa6824d7556f502756865c7ba66061b8b20027671e8669599a4428c78d542de4
MD5 bfe9a386eb32f475de892c11461c27f9
SHA1 96f2628f347ad7227bc71f841a81c58981f671e3
SHA512 c81c3a428597b061672fb6a9ea458a429b5957c091c1301c5c3cf7629361dc54e439a7cb8abcc31bdc15192b31329c1e5d6a7364d7be8d95260cdab4cda6305d
SSDEEP 24576:clJFTGWWLQ7ns9A7bafDkjX/805FV98jvesTDyXqVx2Rv55cKNhZGa:clJBGW+QT8AIkjP9jVCuXigZcSh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

20437

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

41KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

174KB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

910KB

Virtual Size

912KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

bfe9a386eb32f475de892c11461c27f9.zip

aa6824d7556f502756865c7ba66061b8b20027671e8669599a4428c78d542de4

generic