334936a8340ba1ed164d0ddf6a4413af[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

334936a8340ba1ed164d0ddf6a4413af.zip
Size

161KB
MD5

3f3d7a354404735e881f18a8a080db24
SHA1

27e945d64e0cafce7ca1830e8037854bc367b5fd
SHA256

0ad20f1480c68e481811460b69cb1865bf98efa76b0371a3749d9d3386f866e6
SHA512

3df98f6bc0b4074fc056bbb5cbd95a746af3747ef44f9769afa277f2cd3bf2cfaa2ca18e63ab174d6dc9d60b092a49c74c14c8447ca27e7e82789bab476c91fd
SSDEEP

3072:r1NumNm0hG53MsprxJh+vXSchKqGhvkwdZpYUhDCakvEhmxen:RNm0IjEXS6jGKuqUayn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/182f45879c94f199987376e75b1295e3cb2c011b5110979a23af1c6ea22b2d4d

Files

334936a8340ba1ed164d0ddf6a4413af.zip
.zip

Password: infected
182f45879c94f199987376e75b1295e3cb2c011b5110979a23af1c6ea22b2d4d
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ