75ce5cfc2fcf7a02bc4c9984f1fb2395[.]zip | Triage

Sharing

General

Target

75ce5cfc2fcf7a02bc4c9984f1fb2395.zip
Size

469KB
MD5

28ace6d1abe83de1c437fc57f4996678
SHA1

c167a50505487d3c45b032fe2abf3875e54efea1
SHA256

25cc47a3479260da48c41183e6b92902c3856aaefcc629027d48ce6323b3e2db
SHA512

08246e80c276c1b985c4233d16776de9b87edd54b9200acc3a32e646b2402c62170dfe6cb8b7ffeb573e0471bfbe823e8d42842408d06f9e652dd8f9dea7a36c
SSDEEP

12288:/5aphAQl63CZmdtH6StIoJ96ElJCqhXZKcsvawcJWnUnAgo1:x4hJZZExJsELjXycJWnUQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3a6539c00e3dc27f79e821c1a5cce58f9e552657d93749270fe80c46e3e1caee

Files

75ce5cfc2fcf7a02bc4c9984f1fb2395.zip
.zip

Password: infected
3a6539c00e3dc27f79e821c1a5cce58f9e552657d93749270fe80c46e3e1caee
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ