0029ad5e7225ea0056b7b9eb1d20d9f9[.]zip

General

Target

0029ad5e7225ea0056b7b9eb1d20d9f9.zip
Size

477KB
MD5

e752cc04a059456820e9bbad5773b99e
SHA1

1616075ffeb1454f650692accfd665797cdc4e4d
SHA256

7ce479ab06f8cc056e2b7062402556fd165109bc1c3ed6720835eb683d86ef63
SHA512

73c2d1fce39d8c40fe35c45a9a32d57197aa249e1f1ad493644346a9f6597e1b9e83b55648e15c6026eee8b6289f3e99bd4f556c3889110075aab6512f7b6295
SSDEEP

6144:7/4au/vzGAxLGg3iArIQsw9nCvRXPEYH6F4AcsA96Qt1vm+cZsncjXlTCAtsxqYw:DsaAtSQVswCR/EYPMY1yGnujQ7ldAQm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cf9c526430f61947f9f5cd0ef2c9562484671e9e5d32d6d0cc5ada85d30b83e4

Files

0029ad5e7225ea0056b7b9eb1d20d9f9.zip
.zip

Password: infected
cf9c526430f61947f9f5cd0ef2c9562484671e9e5d32d6d0cc5ada85d30b83e4
.exe windows:4 windows x64 arch:x64

Password: infected

3c318dc08aec80512b1ac3a404454c57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__getreent
__main
_dll_crt0
_impure_ptr
atoi
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fprintf
free
getopt
malloc
msgctl
msgget
optarg
optind
optopt
realloc
semctl
semget
shmctl
shmget
signal
strtoull
toupper
warn
warnx

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 464B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

3c318dc08aec80512b1ac3a404454c57

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 72B

.rdata Size: 1KB - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 288B

.xdata Size: 512B - Virtual size: 184B

.bss Size: - Virtual size: 464B

.idata Size: 1KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 72B

.rdata
Size: 1KB - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 288B

.xdata
Size: 512B - Virtual size: 184B

.bss
Size: - Virtual size: 464B

.idata
Size: 1KB - Virtual size: 1KB