4fefb89891796db4e7a9926e099853dd[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fefb89891796db4e7a9926e099853dd.zip
Size

15KB
MD5

3329e8c5d316e6964d7b958c6983776c
SHA1

6e023a58856963dbe865ac4a9eacc6d53c6afe61
SHA256

d6b0cf9a2118442c94242c9ffeff3ea73bc400f1cf3015cf0efae4560645c4ef
SHA512

a50123ada1d67c0501c8ca1af706242e1f64e5b5487e8eaf215714e02fae751f266e1806ae4b123878b2cdbc0fc6a3884eb1bad1fc3e94b70eefe504c9f0dae0
SSDEEP

384:v717VsztzqjZvKY7X09Ji/b9y5Zdiu8xcLfWxDZXMSc:D18mjl7MY/xyPkekFtc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/71a9c5d8b4c4dff0c038ea2b56e07fcf0cf4570bb8df9fc2bdfbff69456fa38a

Files

4fefb89891796db4e7a9926e099853dd.zip
.zip

Password: infected
71a9c5d8b4c4dff0c038ea2b56e07fcf0cf4570bb8df9fc2bdfbff69456fa38a
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE