5b023210a8d292480026b530ccbc6033[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b023210a8d292480026b530ccbc6033.zip
Size

11KB
MD5

df428eb63a1aad741c7dd04e236aaeaf
SHA1

c778d89df7a83bcb5d9989986e3a3b8dda360231
SHA256

3c97d368fef039d022e5ab4da79f0907224dc65b38ae1782866929f44b6bc24e
SHA512

e917075deee9a902cef5ef4b8b601c97913aad74d3ad536188cb7a2096ccfc5b827e569195a915443742bb468ee19f4179bb45036d96bf3d11dcaeb2c9e43038
SSDEEP

192:iFscfesbptPRS7fopkyw6aWy85caAsN9sBE7ntDqVgQt84CHMpGs/GjKg:tcGsbDpgfop17yCPAmQZt8ZlHj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d8b2b0cfeedbd8ebfa3d34576538d546d53e1cfe04a906da1be9a83bb3a203c9

Files

5b023210a8d292480026b530ccbc6033.zip
.zip

Password: infected
d8b2b0cfeedbd8ebfa3d34576538d546d53e1cfe04a906da1be9a83bb3a203c9
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ