cfd61ea2bcc3c9a23f231bae53f8146d[.]zip | Triage

Sharing

General

Target

cfd61ea2bcc3c9a23f231bae53f8146d.zip
Size

43KB
MD5

b68e396b768d0e763be0a27035defff5
SHA1

bc1d4682654b8f18e646861bb77365c89e7c424c
SHA256

388bd4292ed62796659d51afd0c69fb8542793182504c4f696e692c8ffb0321f
SHA512

f116de1e18a01fd6ce83a4027850ac8ec3626fc74c14a02c0eee02827b57c543ad76c17dcd429fedbadcd660fce405f47d661c144364f39993e7f7653b7f9ada
SSDEEP

768:WBOJSSvn/+f9L6m0wYTeyt7pxAFnqCiYxd3UvT/SK1rKngugt9FI2ju5Lm:W8JSSm9LZ0wYCG7b2qCiYn3UvTOguKzR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ed21af234022186ccc65c22880702d9b755628f27892056b94d936029464b09b

Files

cfd61ea2bcc3c9a23f231bae53f8146d.zip
.zip

Password: infected
ed21af234022186ccc65c22880702d9b755628f27892056b94d936029464b09b
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ