5ed70172c4647f6906990457b9b6955e[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ed70172c4647f6906990457b9b6955e.zip
Size

173KB
MD5

8e82fbad1116dbd168292e5e54041cfc
SHA1

799369d48a925405493bf7e7cd9084586a6541c3
SHA256

3336b3f44ce97f1bb1fd2fcdc328fb918f2251030bc9c909906f6b1a69428700
SHA512

341c185a887d7a260a0455b5210df21f4446bb642f2f79c5258eb60830b013510f442b7793e0c327aaabfa068ba0fee4ef27d01b7c10050ff3ce62d2c32e7334
SSDEEP

3072:Q8yIwlO7Bp2otFLGG40+iWi77tayszpLzvwONdjAnIRrsmlWh80t:Q8yI97BJtFLGebftaysF/ljmYrsmlWhp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ca8cd2d3d060e43969090a2a3f509704e8b59fac05a529736ceb36d2dc214c5d

Files

5ed70172c4647f6906990457b9b6955e.zip
.zip

Password: infected
ca8cd2d3d060e43969090a2a3f509704e8b59fac05a529736ceb36d2dc214c5d
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE