033a18ee82b1e6d85c2ac76b91f4d401[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

033a18ee82b1e6d85c2ac76b91f4d401.zip
Size

14.6MB
MD5

6df727b8491b89762aecb948b05d3682
SHA1

718be345ade419bb5fd38b5ddc21b187be7b131e
SHA256

f2749c251be99b5789fec4fad72f4f088956d2c6ae807a75f01ff434018a717e
SHA512

3a043b0f517dc6ad55e4963c6c44a01213df7a0ba7fd2c9d395b3e0452bb3db0abc9b5de4f069ccb5a42103e3e1bc7f11edc7b2668c7d0a390a2497a55075695
SSDEEP

196608:1Uf70qomdXAdanysYRgn9tsXnVgyy9d0fnYdJ7MISfX0PIa7cynWikDy4k5kh4bj:A70qb+SnHsXrdYpcCWiQy4aYU7KrmHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/56e85b539486a9a9cfe8cc103b8c04e1aacecfcca39bbbe2668a1fb088d93f99

Files

033a18ee82b1e6d85c2ac76b91f4d401.zip
.zip

Password: infected
56e85b539486a9a9cfe8cc103b8c04e1aacecfcca39bbbe2668a1fb088d93f99
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ