e1ea68889ae9be34f7bb641949fea911[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1ea68889ae9be34f7bb641949fea911.zip
Size

225KB
MD5

00e5df587dd093e062503c687f0f6907
SHA1

b69dc2c3a93a2d9bd7e2dea985b241c29d420840
SHA256

94ebefb811ba3819ce88df67be475f70e39d208f35253bbc0ab9d9c5b9ef6b28
SHA512

799e207fb4e6a9b354ae7a7f72ff05751c5ba5251e7706b2c3ba6df1fc382cfd3a8a293e48e79b98db5203e4c77f52f7c27574489a4e897593e4586fc9c521ed
SSDEEP

6144:SUigr6jWRMcy9b6IOiHpSGARWzaidhuwfA5eGPQAVkGf9ta:SUigrZ+lpSGANi+wfA9QUfO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/970c6915767a063cce223bc6f26fdd3b1874c56f0c3083701e475736db68f5e5

Files

e1ea68889ae9be34f7bb641949fea911.zip
.zip

Password: infected
970c6915767a063cce223bc6f26fdd3b1874c56f0c3083701e475736db68f5e5
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.data
Size: 1024B - Virtual size: 996KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE