33c9aacfe16db6f2955fbd24684ad5be[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
33c9aacfe16db6f2955fbd24684ad5be.zip
Size 472KB
Sample240831-leddaawhqd
SHA256 b1ec7b390f1cc567d1279a87c5495c971a5f7fa560a39995d60462ec9c6ad5a7
MD5 203183e9c5b6a32de455598c5bee87aa
SHA1 e8bcd1ba2fffdb98009cf8c15f9e13dcd52ff5c5
SHA512 bc00145a9387d47ac9bb3732a1fe78786b4f4465b6e03078f5c3ab5785b435734062de08e477b071f8bd56a9a08fa9c19cf97a8d4e3298ab295ef74297d9fc14
SSDEEP 12288:Qa8kO8Vo+ZI4RWd7muQG/OpSzCWH3VCJcHelOTdXeU:X8/8aCIgWdD9mpSeWH3VCJG1wU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7471293102d9a2f933dd7faacdf2ca19735b4b9b6a2bda78c4e11efbd44bb44d

File Explorer

33c9aacfe16db6f2955fbd24684ad5be.zip

.zip 472KB
7471293102d9a2f933dd7faacdf2ca19735b4b9b6a2bda78c4e11efbd44bb44d

.exe 812KB

33c9aacfe16db6f2955fbd24684ad5be.zip

SHA256 b1ec7b390f1cc567d1279a87c5495c971a5f7fa560a39995d60462ec9c6ad5a7
MD5 203183e9c5b6a32de455598c5bee87aa
SHA1 e8bcd1ba2fffdb98009cf8c15f9e13dcd52ff5c5
SHA512 bc00145a9387d47ac9bb3732a1fe78786b4f4465b6e03078f5c3ab5785b435734062de08e477b071f8bd56a9a08fa9c19cf97a8d4e3298ab295ef74297d9fc14
SSDEEP 12288:Qa8kO8Vo+ZI4RWd7muQG/OpSzCWH3VCJcHelOTdXeU:X8/8aCIgWdD9mpSeWH3VCJG1wU
MD5 SHA1 SHA512 SSDEEP

Password

infected

7471293102d9a2f933dd7faacdf2ca19735b4b9b6a2bda78c4e11efbd44bb44d

IMPHASH 4aa82b91dfdd0eea976043de209425e6
SHA256 7471293102d9a2f933dd7faacdf2ca19735b4b9b6a2bda78c4e11efbd44bb44d
MD5 33c9aacfe16db6f2955fbd24684ad5be
SHA1 7b84f2e541f9a0f1ce437b27a49e47f5137f5980
SHA512 6eaca454b191883ff27a8da8d12b961ffd3e944835229f875897f6d31036a04210337da801f948fe4454e25ae1223da68d6052d03f528e752651ff146b69933f
SSDEEP 24576:V/3CD60nAL5f9WjGit+D2reyaMDUXuuo6k:V/CuvSab2reyQw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

4864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

532KB

Virtual Size

532KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

180KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

752B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

33c9aacfe16db6f2955fbd24684ad5be.zip

7471293102d9a2f933dd7faacdf2ca19735b4b9b6a2bda78c4e11efbd44bb44d

kernel32

msvcrt

generic