03f373ad8f4e1b0d58b44fd2c8e0c707[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03f373ad8f4e1b0d58b44fd2c8e0c707.zip
Size

130KB
MD5

f5a25c7882617c586cc73c4574730df2
SHA1

a9333b17ee81f288ec52cbd7d5fbf4277d8a6800
SHA256

e093dc4a92a101354ab5377b945e84958300cd4c60ab7fa4b9bc36599d2a076d
SHA512

bff36de652f10a7956948d7e91fcb72b554ab5ee6f9a5a70f3dc5d636efade3302a9c269904315844b3f57475fb8d1c67df6bf22e40bda0d3f5d0677937dc1c8
SSDEEP

3072:GTJg6yVLhiBBesAg248n4kMGfjlfo/r7DmFoVWuhtAU:Gd+Zy0sH248aCpfoj7DmFos9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/14f8a49b6dd0655a3dbcab74899dcc917a5650c63c22dbb038a0b4db48dd5ec4

Files

03f373ad8f4e1b0d58b44fd2c8e0c707.zip
.zip

Password: infected
14f8a49b6dd0655a3dbcab74899dcc917a5650c63c22dbb038a0b4db48dd5ec4
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ