266ec319f0f1dd2eb663a762138d8567[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

266ec319f0f1dd2eb663a762138d8567.zip
Size

70KB
MD5

affd119ba8f9b896c7ccceac890bf60c
SHA1

82e7e93e5434616e23a0f3736f84fa97552bb17c
SHA256

f8c3a58789f1d8cd181b25bb7d9ee75fb9829f64f50ff2e18cd9c58880c862de
SHA512

f8c1ec5b7fb4fa5ea49365893e799d60fae0d837cc1df3d7552e2bebd2261ce65d02dff1256da564c59caa25e9efe1c8f30d9738d6050a07aaca19c2be791a4c
SSDEEP

1536:Xh28Cvqg3yBgI022nVHIFIORVrjCHckaa5K3eq7uiEQfrvULNVjwnuIuY12:xUvJmghVnxgRs8kij7ui7frvOVoupYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/48614b046c9a71363bf5483fd444f2938a05de8a490eb4657087f9e1fc72bef9

Files

266ec319f0f1dd2eb663a762138d8567.zip
.zip

Password: infected
48614b046c9a71363bf5483fd444f2938a05de8a490eb4657087f9e1fc72bef9
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ