c898b7545b8bdcffe92ec6eb247350b5[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c898b7545b8bdcffe92ec6eb247350b5.zip
Size

19KB
MD5

2687679795619cf2b1485a1133b12782
SHA1

13e88694c1e7a1dfb0ee759dd4b7a9b0dee4f554
SHA256

089b52307fb5a32d4513a52e1aa57435006fbda974e422b13fe23f1a927f5063
SHA512

6b68c256eb72361e4f6304ee0411eba9f9ef4d08382820668e36b74b8189a4138372b121c86c11c77b52756fe5606af710995b5ef174bc13f299b1f3209a39dc
SSDEEP

384:S0d4e/9xX1uQZsazq1PoOVpJIYKec+MbFHbJV6Js2fBDji+WFsd4P:4e9F1oGLe8H1V+sCBDji+WM4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/059cf31cab3e9e0f6afd2570fd1b9c7db847405fc954f494a8c1753cee28a330

Files

c898b7545b8bdcffe92ec6eb247350b5.zip
.zip

Password: infected
059cf31cab3e9e0f6afd2570fd1b9c7db847405fc954f494a8c1753cee28a330
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE