1f36cef11703d02156ec9786bbfb9c1a[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f36cef11703d02156ec9786bbfb9c1a.zip
Size

91KB
MD5

63ef094e4e7d1f8a50430c7cd4039ecb
SHA1

05993b807fb303e2d8e6543bac66cf6cd3811032
SHA256

611409010813e1a8671585b55e8094b41908a8a5f58fbcb97d04820ea2df46c6
SHA512

928e81ddc0a388dd19960f477bf82ef09da3daa00b0ae08857df9975a4bc5a851e6d1a288b2ddf36c82d9f71a1a79b79c7ab401e98c2f803f1e4c426068445b7
SSDEEP

1536:/MKjZTIAOJ9MhSiAWUQEoRz2XGVKrDQ/KC92KEkxO2srEQko1Dv1zZH7yENm4:0slOvYAWUQ/NOGc/Ql8BosrEQR1Dv7HR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2409ee26ec06e5f1ec97220fae013e7d3c875e30cd293a37aaa31352afa6b828

Files

1f36cef11703d02156ec9786bbfb9c1a.zip
.zip

Password: infected
2409ee26ec06e5f1ec97220fae013e7d3c875e30cd293a37aaa31352afa6b828
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ