ead92d449ad4c939c6593747b2fe48fe[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ead92d449ad4c939c6593747b2fe48fe.zip
Size

99KB
MD5

3c4b671086b71ed7da8cfeb95f2b7033
SHA1

3beaf2c832de4fb598d76642e8792fbc28174e80
SHA256

623f917094b89577e8f51aecdb30a5ae007e649a85ebd96707d175585bfbfd63
SHA512

b08c688e875e55a3b737ecba405d287a1b8ba52242dfc19d95720a00604f8d7a0dbfd867990fb518922f9c45a505f8055cc4f70da7526668b6bf0acce7c19b39
SSDEEP

3072:h+AZ72zxsBVOjNBM5zrBv92ScOwJzHgXXjkJAw:hxZazxuVEc5zj2/OwJz8XQGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9f3d77fd3c9bb5c8d0513e375a8bdb460d7e8fb17f95fa952976666c3bc0d0e0

Files

ead92d449ad4c939c6593747b2fe48fe.zip
.zip

Password: infected
9f3d77fd3c9bb5c8d0513e375a8bdb460d7e8fb17f95fa952976666c3bc0d0e0
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ