4080a89b24796528bc9ea4ea02474b72[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4080a89b24796528bc9ea4ea02474b72.zip
Size

58KB
MD5

3ebf9f13dbf97a7d0758755c8cd83ac3
SHA1

e0bd9d2cd556329410151e51e4cbb3c413df4262
SHA256

226be679573d87cd7ad1251c511312682b6bdd93c2ffa0147033361bc47c0af7
SHA512

123b7f65da81f0b79bef4985fdec6c460cd189460b0f13e11b9243ebe124cefb44e490f153b65b100ebddfdc1dc85791c302b762170dd67e41cb7bba3304b7f6
SSDEEP

1536:3ShsQTCvs82B2ZFulWHc7lCYq6hS1EKFa3:3sn8FdHc7lCYq6c1En3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b3d5986bb389dd7195bd7cf37ef8b0ed716fb981e77947c25c8dc4014d43aa72

Files

4080a89b24796528bc9ea4ea02474b72.zip
.zip

Password: infected
b3d5986bb389dd7195bd7cf37ef8b0ed716fb981e77947c25c8dc4014d43aa72
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ