5c5e2aea9788097c08f1d23cf50186ff[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c5e2aea9788097c08f1d23cf50186ff.zip
Size

147KB
MD5

ce22bdaf4b5ddab4894ff1d87cc11206
SHA1

0d7080989bd02da2e77e271d928539e775c898d7
SHA256

b2e481d7324e4c055c89c6600113fe5d042d4bfbc688d8c8cdc0c615acad612f
SHA512

9d48d5e3c4faca4bf58d1dfd7b9d20981c35539a2f425a5166936b3a7b3c2507fe23ef0a92d12987b4515539ac70f7220edb115d7fee0a9d583c7462b1683b86
SSDEEP

3072:TSY1vnJNoYZ/SG6SGMGSA+RFTS7hr8i7Nrg/ZodpDp8PmnplIXfDgHpQb:uY1v0A/SGHpZRE7hr8aNM/ir8P6pWDJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5050857fb197ef717b3595c1f54115fdb11176c58c1fa80a4b05d2bd1667cfff

Files

5c5e2aea9788097c08f1d23cf50186ff.zip
.zip

Password: infected
5050857fb197ef717b3595c1f54115fdb11176c58c1fa80a4b05d2bd1667cfff
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ