0674eac9f55a733291103eefc2794f70[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0674eac9f55a733291103eefc2794f70.zip
Size

160KB
MD5

c3e71d0fd5607a9780651f13f3afac13
SHA1

d214235f7fea579475faf8f1f04581c1ddc5c499
SHA256

7060a5cff1f2a3b52fea3078c1a81a5d52c9f0a81a8c6dd94cbbc350bbc671c4
SHA512

f414c4e93dc87b12394f7eea5aec3f3e3a5640920350fbbaec725c0df00551471d12c121f77c5613f02a10e717cc774dd751e7aac01107c9b233bfdd7ada9fe3
SSDEEP

3072:PfWldeRJizWBBa2Ny0CiWJjYtXSk/Rw2UHuDAylLYJZpy/Kb60:mlD0Ba4y0CVJjUJR6uUqL0Ly/O60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0dbd71f42afd6e0517ad66b202875c10c80d0be04bb69db8e8bd19b1c3d58d85

Files

0674eac9f55a733291103eefc2794f70.zip
.zip

Password: infected
0dbd71f42afd6e0517ad66b202875c10c80d0be04bb69db8e8bd19b1c3d58d85
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE