858722d3b3de8a541c86a9825e747179[.]zip | Triage

Sharing

General

Target

858722d3b3de8a541c86a9825e747179.zip
Size

108KB
MD5

c62468affd3c165a75c42709989903e1
SHA1

001846c637b5bcdf854885bc2e96fc5c42ba8a4f
SHA256

11012f8b29810833546ecd859b9189ec2d4e82aca230761e332c361f3e304e6e
SHA512

3350362f26c883c72e01fa481e564e77b1b7c2303c74a858265af024ab6f5a391ad7f0d75ce7f1f9d84f0cfd0b11669808292f95e70a26daa64ab698072ee7fc
SSDEEP

3072:+dRCbcp9XU8XaORdIb/K2HOMuxk3Ox/tPjM6xwL9:+zCw9XUUGbi2HOZxk+1+39

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3de3db30c5eba8bf7f418db0477b4e1b39de5f42456741262c68f8efc53abb4b

Files

858722d3b3de8a541c86a9825e747179.zip
.zip

Password: infected
3de3db30c5eba8bf7f418db0477b4e1b39de5f42456741262c68f8efc53abb4b
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ