f9ea660927ad413a59dcd8f1b681bfda[.]zip

General

Target

f9ea660927ad413a59dcd8f1b681bfda.zip
Size

7KB
MD5

1f8e0d3559af80d753958e48c56ed633
SHA1

637c2233eda2169e73e7980d2a55b8388850011e
SHA256

4d0b6194b985c60ff3f051ecafd0ec3f3009379e8726ac6f30fc102da2cdc687
SHA512

74c45bae63ae961046cd132c37c172c05a51944455c76f12cb1fbd895a3f16c08fa2cc285fcd985c749e14a201b0034c4cf99c8e33da3f33003f4d23da080fc5
SSDEEP

192:MPWMS/qU6K+AZh2F+I1j+wXHMc1eJfiU0FbzQbcGfN3Y7j5Ph:AK+btx1eJHKzKcC9Cjr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7aced28ac7c72e24cf01003ec6dc8a3caccbc4c91d80a85adf73afcdd68e3129

Files

f9ea660927ad413a59dcd8f1b681bfda.zip
.zip

Password: infected
7aced28ac7c72e24cf01003ec6dc8a3caccbc4c91d80a85adf73afcdd68e3129
.exe windows:5 windows x86 arch:x86

Password: infected

dadb12329976145c6a364992dc8ec07f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestA
InternetQueryOptionW
InternetSetOptionW
HttpSendRequestW
InternetConnectA
InternetOpenW
HttpQueryInfoW
InternetReadFile

kernel32

CloseHandle
GetFileSize
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
HeapDestroy
GetCurrentDirectoryW
Sleep
FreeLibrary
GetProcAddress
LoadLibraryW
HeapFree
DeleteFileW
lstrlenW
WriteFile
lstrcmpW
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.links
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

dadb12329976145c6a364992dc8ec07f

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

shell32

Sections

.text Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 4B

.rdata Size: 1KB - Virtual size: 1KB

.links Size: 512B - Virtual size: 260B

.rsrc Size: 512B - Virtual size: 448B

.reloc Size: 512B - Virtual size: 226B

.text
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 4B

.rdata
Size: 1KB - Virtual size: 1KB

.links
Size: 512B - Virtual size: 260B

.rsrc
Size: 512B - Virtual size: 448B

.reloc
Size: 512B - Virtual size: 226B