ccbbb80d91a6298268ef13f6963dfc52[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccbbb80d91a6298268ef13f6963dfc52.zip
Size

14.6MB
MD5

23a212b885e02d5bdfe55e54348bb037
SHA1

98ddae2bf0ece569c48395ff8c4dde44d2c0212a
SHA256

ae5a260fac5ac3370338003cc64fa95e6d5fed5674340212e459a6f50904aa71
SHA512

d1069d6d52fea02a605c52d45193ee5f6a762fc760f0e1fc145a2fe02a47850900d7942793263d7cee91fe4cc837f545466b003f5cc7aa401f48882b47c10a0d
SSDEEP

393216:9UzR/fxgfwUBRkwxFoZmvG0zIjZ+rtHQDXD:9UzR/fmYutHomuXAtHQDXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cbe3a182ca2a7026a23063d4a684ac1bcb9b9a286cb69fcc27d668e2b55ac5f4

Files

ccbbb80d91a6298268ef13f6963dfc52.zip
.zip

Password: infected
cbe3a182ca2a7026a23063d4a684ac1bcb9b9a286cb69fcc27d668e2b55ac5f4
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ