3569443660530ad9921f7023d1ceb16c[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

3569443660530ad9921f7023d1ceb16c.zip
Size

477KB
MD5

a8fd35112f4354cf7232b0c60d802fab
SHA1

e1031540453171b21329327cd5486870fcee41de
SHA256

2b89e306dc4366ee9e8c86823d30712bb6885e19ee14259b5eacc12cf27f3bd7
SHA512

50bc81c7010c0289619b39601022530b2c7bcd5028946cea64c8a394a018fd9b0fc8ea5975b78035e245154a19001d10c6867bf8680e4fbb9bee96a8262b92a1
SSDEEP

12288:5YQtXIuJ5Uuz4h37Tzgi8AZZ4FuDZpaDEIIu5L:5JXIFuMhrTzgA8wDZp8Epux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1aa1d6dc9b8891b09abc24322af2d0dad6a266bcbcb1e58925932b47c4372219

Files

3569443660530ad9921f7023d1ceb16c.zip
.zip

Password: infected
1aa1d6dc9b8891b09abc24322af2d0dad6a266bcbcb1e58925932b47c4372219
.exe windows:4 windows x86 arch:x86

Password: infected

4aa82b91dfdd0eea976043de209425e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
_strdup
abort
atexit
calloc
free
fwrite
malloc
mbstowcs
memcpy
realloc
setlocale
signal
strcoll
strlen
tolower
vfprintf
wcstombs

Sections

.text
Size: 541KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 168B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

4aa82b91dfdd0eea976043de209425e6

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 541KB - Virtual size: 540KB

.data Size: 181KB - Virtual size: 180KB

.rdata Size: 1024B - Virtual size: 740B

.eh_fram Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 168B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 91KB - Virtual size: 91KB

.text
Size: 541KB - Virtual size: 540KB

.data
Size: 181KB - Virtual size: 180KB

.rdata
Size: 1024B - Virtual size: 740B

.eh_fram
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 168B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 91KB - Virtual size: 91KB