dcd5224f8019432499401380626e5c90[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcd5224f8019432499401380626e5c90.zip
Size

1.0MB
MD5

09e7d209d5464f72b0d8fcc026eb0e19
SHA1

b826fa514518d21842d05a65c74db3e002d1a13c
SHA256

39eac2cf6fa9ed935fbd0d98af8092f30ad5da837250e6531560304da3e82470
SHA512

46f9fc3c54923cb48726112ccee7b0286e7f39577f47001d9fe894cd3c2cf23501eda0f5e93d18c2e59fbe6f586a0614048eb8888d3572507b6531fb7f78326f
SSDEEP

24576:y/fGzrsY8/RP++C7ui8Ta21bOCBh8/5ijaNhFW:2UAY8s+C5ktOo6kaNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d508f7fa982b0d4f17cbc46379a901f91b90a438c93319e29afd995a079b1849

Files

dcd5224f8019432499401380626e5c90.zip
.zip

Password: infected
d508f7fa982b0d4f17cbc46379a901f91b90a438c93319e29afd995a079b1849
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ