0e712eb12ab0f7dc24ee8055887a8f68[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e712eb12ab0f7dc24ee8055887a8f68.zip
Size

1.0MB
MD5

d8754b0748a0347e76c7e4bebf56df43
SHA1

198c063c521c5abdc3b70a122af230f453627d9e
SHA256

ad6b7b5ed8d09d02615dda7fbdc6ba9312e1d8abfd9adce2e0e23d62c4ad0f6a
SHA512

79d5c8ee9b30c662071d9b65974609d8c56ea8b0918a9be60021549b57e01a911bee6242cdeb3ebc997144fb0ff3e20259fc0dac7efd034aa7b6851c08b6959c
SSDEEP

24576:t1y2jM3lKjg5vqbkhsEUyQuB5epN4PahuG1UEWqQQz1/lSWin:eSMwwvOkoyQunepN4ShdgLQzjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/259eafcdb565425fe69994a0b0b849dda19d35b6baba357829daa24feb5ba090

Files

0e712eb12ab0f7dc24ee8055887a8f68.zip
.zip

Password: infected
259eafcdb565425fe69994a0b0b849dda19d35b6baba357829daa24feb5ba090
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ