9da56714c2611d3450c7bc593d2e0638[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9da56714c2611d3450c7bc593d2e0638.zip
Size

1.0MB
MD5

f0a1db48170803b6c3ee7cb204386619
SHA1

c63647afdbf78d4c880e59a0697d90700a213ffb
SHA256

ff58ba4f3de6ae30e6b788745b9ea6515ba79fff33f5a0d3aa7c8e133f499da1
SHA512

14a206c8aca7d48b1c610607bd1e0cb212ef6c81f9816c9eb8f0644f4dec1bbb1e9f88b780bbf909b4a0360c9ff227d633b5d7078b948d06101ced6c800072b3
SSDEEP

24576:KATxWs8LLaRlXl6yBtWZYLIGKz7sJKwIamOJ8IvjJ57YySdse+sBazuM0qYI1/L7:REAlV/Bc6LIv7OIaliIroyxEXMB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/18183445afad7c932ee8b7341c75ece534015a4097e4ee67e922cafe0fe43a99

Files

9da56714c2611d3450c7bc593d2e0638.zip
.zip

Password: infected
18183445afad7c932ee8b7341c75ece534015a4097e4ee67e922cafe0fe43a99
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ