f194d3e40aafa03c4b3ffac816248f87[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f194d3e40aafa03c4b3ffac816248f87.zip
Size

111KB
MD5

7eb766cfa450f6c9d6f23b9541ff4003
SHA1

ce57132f7c447262ccf5051b4a7b39804052b733
SHA256

8a85fa419d2c8707f700f89d786db0037b73dd76f2c03ff77c7b5293b4e45782
SHA512

7d52ae851ac98ec4d28b5ef3ed725c74afcbd961f7cbc3a73e8f4dfe090a38d7c3b7966df2c10a2ba3906d2bab684bdc170f6130e2c2a8af20c6478ad5c012bd
SSDEEP

3072:KU8woOiJuYAX2RniiHTt0k4bz6TiSL5wrLbgVg:v8woFjA2wiAbxSL5UXT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d22b80db2baa40bb2be4551025da3fc6257042aa0988669a94658244a7d72cd1

Files

f194d3e40aafa03c4b3ffac816248f87.zip
.zip

Password: infected
d22b80db2baa40bb2be4551025da3fc6257042aa0988669a94658244a7d72cd1
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ