346d7741445210c845faec7ee7a7891d[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

346d7741445210c845faec7ee7a7891d.zip
Size

87KB
MD5

97c1cff7cea0f0d5e96631706bf6d6e2
SHA1

30fb02417ebeab57219c4dc3e2969ea16eb32050
SHA256

398918c63e7b2b1b9c0d6a31e6b8900c55a190173237ab09986b8b7a6cd8b3bc
SHA512

4e89170a2e86a1001d8076e043e3515b2dd88f88d2b14101d5bc21ba4149075417e257b50b4427fd535b9b30fb1595e351d7d9f9414be52e8cbe89c40ba91ceb
SSDEEP

1536:yC83OjkVekEA7KAmyi2EKlhFdR4REfC7NULaFwvY2kHMgdgRJC0eQY6MFNxa2pRD:yCPgefAkIh0E6S+SQ2kHMgSTJS7akw0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/40e11ff8081d2367bd764a602e9281f35dc891ad97508e2cb6cdd097d8cdfdf3

Files

346d7741445210c845faec7ee7a7891d.zip
.zip

Password: infected
40e11ff8081d2367bd764a602e9281f35dc891ad97508e2cb6cdd097d8cdfdf3
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ