6c3368bc8cdcfb7cc11fb02e09b0eb6c[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c3368bc8cdcfb7cc11fb02e09b0eb6c.zip
Size

5KB
MD5

bd05bfb31aa5336b0153feaf4e1164b7
SHA1

e2149eb53f59e29e4e517cf0e0de806e996470e5
SHA256

67948a7bb94f4b6967f4c1676a1ea405a001ccc2af5f6015a2cc7119fff767c6
SHA512

d654a147629ccbfda9802801b5398e377e1b63bb839dbba83e7e9bbeb9e203e3fbf8c2c13536f789dfe259c5e44b97fa8ebff05bf775588e3a6a11f8caa8acb8
SSDEEP

96:VjBISWvygAsZkFc6VbEOzVX68u6QnqUqud3UaFDve+G9xBXeXzFGnIOETjWpOj:VjTWFZ16VbHzVX6caqUqe3FDve+TXzF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2b885a80144e3940dcf71d483e90f747f97bf12a417283631899f2b07bf2b899

Files

6c3368bc8cdcfb7cc11fb02e09b0eb6c.zip
.zip

Password: infected
2b885a80144e3940dcf71d483e90f747f97bf12a417283631899f2b07bf2b899
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

petite
Size: 386B - Virtual size: 386B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ