2c6747a23e9eccf41c1c6b3766341c3b[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6747a23e9eccf41c1c6b3766341c3b.zip
Size

180KB
MD5

d884bebcbbb61d157d78645d69fb2000
SHA1

811c21ccbaaef4416396210169e93c6c30bd30f3
SHA256

f3642e15f648b1ac12bf9e5ad41ed552ae6b50a13ecd59ef6951e0da9a10eac1
SHA512

3e326655420c420b364885177a44ece96988a003c0d0adc920d3bdbf021d1d7ab317cb3841ad34474992404885174075584131c2605c50ad31647c83d2b49f67
SSDEEP

3072:Ze3/xEM+e2g+l/GAyAKWUlbNHUM4Em++vb6bL0tlI5C6iX4er6LbinrHCvH+D9a7:Ze35EDe2ngA3AUM4EH+Wv0VDusrivg9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ba6e7972605c66882dac1d0449bc21547e748e6bda1088d816c68b0f34e3a577

Files

2c6747a23e9eccf41c1c6b3766341c3b.zip
.zip

Password: infected
ba6e7972605c66882dac1d0449bc21547e748e6bda1088d816c68b0f34e3a577
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

MEW
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�uۊ��
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE