66eebf072781d2ebc2556287008fee7c[.]zip | Triage

Sharing

General

Target

66eebf072781d2ebc2556287008fee7c.zip
Size

1.0MB
MD5

9c1fcf3321195ce9faeef85866c256e6
SHA1

5afbd18c0dbcff05f0bac84c69a99dc9d35a819b
SHA256

0197083e2fd62b818076e823243d64f975a1efba34bbe06d1567d276bbb0a164
SHA512

aafbd69c9ba7d6225f2a45697bce5b5674048b71097e390665db5db2aafe71dc9382c6fb9e8b6afbdbddcd5f2faed2e9a00bb70012a3f47b0ac8c563e0fb815f
SSDEEP

24576:JPvldvlV5IZeBylQcKs+TjYvLLFyqiaQsndR2DZ:l5KeBYFxLnRnS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d33bd2711bd16e64c6815b7a22cd3d38feb67aea46299a7b1b20d3c3beda44aa

Files

66eebf072781d2ebc2556287008fee7c.zip
.zip

Password: infected
d33bd2711bd16e64c6815b7a22cd3d38feb67aea46299a7b1b20d3c3beda44aa
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ