5f6d20a1b610e01d3462069fa295224b[.]zip | Triage

Sharing

General

Target

5f6d20a1b610e01d3462069fa295224b.zip
Size

1KB
MD5

53d176cec8c64e684ac6c7091a778438
SHA1

a65410e5b4799b0449e81d68d5d44d96588925ef
SHA256

f3c67569ba29db59738c44b919779bb81449fffa965d9b912984c0fc14979aef
SHA512

cb35a8f84d0b0628ad09e2b4d70d99b9e2a7589efe22f051d6cbf6faf9a6a6364995077d5ee3d9491247a8ef1551092f970549cd1500f244a0ee2e8d0fcc2c98

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b861acc04074e73300a66dffdae66a387e705ad1a78494e4fa776481dbf10dc3

Files

5f6d20a1b610e01d3462069fa295224b.zip
.zip

Password: infected
b861acc04074e73300a66dffdae66a387e705ad1a78494e4fa776481dbf10dc3
.exe windows:1 windows x86 arch:x86

Password: infected

2ba629f434c3ca1b21fe81af6412d628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
GetFileSize
GetModuleFileNameA
GetProcessHeap
HeapAlloc
HeapFree
ReadFile
RtlMoveMemory
SetEndOfFile
SetFilePointer
WriteFile

msvcrt

printf

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 795B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE