550da7f8fc54cff0dc78fd5abb433c2c[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

550da7f8fc54cff0dc78fd5abb433c2c.zip
Size

3.4MB
MD5

66d609902b97e6f3343a69e6aeb0c841
SHA1

10fdca3bfed3dfee978628165262f3820ad3c168
SHA256

543a98939c9b10edc32fc81f3e28db61e32e71aef251832892abff4294d7b1be
SHA512

40234a8602ed2d1e091e39ef904d0fe6810745bf0c07786c971aaa2c1e107665965357f89526b70bcef2b035d7b04c2df99fe0a7b43b89e8e2e412e8284851ad
SSDEEP

98304:BHnAWFZtEcEAhOrjp4rjOs8OrjMkzVst8yU+0awx:BHAqtROp4/t8Orj1Jkx0awx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c70ba0440825003c6a9558d4d6229643342ae6c29287b2a6bd38f6a76d3d8c15

Files

550da7f8fc54cff0dc78fd5abb433c2c.zip
.zip

Password: infected
c70ba0440825003c6a9558d4d6229643342ae6c29287b2a6bd38f6a76d3d8c15
.exe windows:5 windows x86 arch:x86

Password: infected

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

Sections

Size: 38KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

afldudzu
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

umycgbpn
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE