4611a406d78f76d9e22314c7c8f332f7[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4611a406d78f76d9e22314c7c8f332f7.zip
Size

59KB
MD5

e06805b2318ac325ad5dcf47b5a551bd
SHA1

680956d100d96917f335bae30bbfad5198be23e3
SHA256

4996d33846f304d329b04ba2cf6202820f92fb8b9969f5b528f88059972ed348
SHA512

eff1ffa6d6ff546552c99a9456f74da438c6c1d5212ea5ee88772fd25f9e5c13dcee95da1d79c0e4b88266ae217d8197be17b66fe98995897f5bb458b5ca7100
SSDEEP

1536:R1eZYdOxJkaF/ZO3NqJYVoz165EO3CV4b5yvf4:RkZGOxbFUSz16j3Qayvf4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f9244f4b7a684124a102edfce891b89d734273a5d6071fbd117935e343f82545

Files

4611a406d78f76d9e22314c7c8f332f7.zip
.zip

Password: infected
f9244f4b7a684124a102edfce891b89d734273a5d6071fbd117935e343f82545
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE