c3513ad213a9fc723719255c26f59c10[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3513ad213a9fc723719255c26f59c10.zip
Size

110KB
MD5

1a6ded94aedce0609ee1c61edf23361e
SHA1

c7624e37fe8e944cbe62c49d92c4a51687fa121a
SHA256

91271f65a73bfad194598c3f4104d5ed1985455aac3396d02270c3e571ed619d
SHA512

0b8376dc2070837a09af02a2bdca200e73ddabfa1cf0aa137c1d221b265472cb0100ce10644c049dfb89190acb36f12dcfa1ef97d6b52278b6947dd96b49ac68
SSDEEP

3072:3d2LfOe/I6EBM2xp3Ac++9eiis+iSd4JGRtmA79:3ADSjMaN+R7s+iv/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/688ea97bc5665b93b4f166edbf129b1121d364fd10ecaeade0e05c5d3720e432

Files

c3513ad213a9fc723719255c26f59c10.zip
.zip

Password: infected
688ea97bc5665b93b4f166edbf129b1121d364fd10ecaeade0e05c5d3720e432
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ