ab43ed433b0c864de7c3b3014772dc50[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab43ed433b0c864de7c3b3014772dc50.zip
Size

3.5MB
MD5

871897d4dee9fcd838cb5f8f6eea4cc2
SHA1

02994005e9fc810279ad38f86f86c21f3c722ccd
SHA256

83d7875ab4742d636d514d367a91f27cebe7451b8d0ad5fa268f500dc7095572
SHA512

653c22270ff299049cf3bf594389c557328ba3f624cb248d9aa00987c4dbd30de3ff5cd3fc7a989d8167201aa631392c5c64f77d89d2f9a452318ec7bed149ae
SSDEEP

98304:DudreNrmvnP33byskMoC0a8ZrRTslueN0YCESezBx2:D0rXvn/3YMDAY5OzESedx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c840ae2dcb3fb728b042b390eae9597c0f9fc7d5e7f8df38f0acc89a0d90c5d0

Files

ab43ed433b0c864de7c3b3014772dc50.zip
.zip

Password: infected
c840ae2dcb3fb728b042b390eae9597c0f9fc7d5e7f8df38f0acc89a0d90c5d0
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 813KB - Virtual size: 812KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ