4816f69923f50d3c30dded37c92b248e[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4816f69923f50d3c30dded37c92b248e.zip
Size

14.6MB
MD5

3c878af64846b50a48a064c296d0679d
SHA1

5007ec53196723bd49f231628da2dbd2f3fb20e1
SHA256

b6b8ebf285c68c27d7511e0737daab6dee940981b0588d6d026043ca13817129
SHA512

acf13687c09dbcd1bf020ceadc04bcadd0da3707b71bd01eee791d09068d9ca7858c30628425a629cab83d2cb7399b1b2ca3b3a93a8420c69015da90cc554d1a
SSDEEP

393216:58AHk/pAB94o3jlVW1OXlAoJWmPUmsLwe2/EAMOd6wU:58tpAkqVW1CSmRz/EAFd6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e04975c32eed73900f2d3cdc79e5a17a498a9080b2c681ca47d6ad95ea809243

Files

4816f69923f50d3c30dded37c92b248e.zip
.zip

Password: infected
e04975c32eed73900f2d3cdc79e5a17a498a9080b2c681ca47d6ad95ea809243
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ