c98b77bd5e0ba6c6776ab09482436c53[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c98b77bd5e0ba6c6776ab09482436c53.zip
Size

1KB
MD5

bb3f4c51eeb2aa9b4f49e7374ce908f7
SHA1

8da66d0d0fb314ea745c58318f3009dd61a43b8f
SHA256

cd26710d19b82aad4e1371f955323ca74d8d55818c0df4d9b334598a18a3e666
SHA512

afe92af94493ee577420bd9e9bbefb56fc7b74ffaf6fd862c5e972af9f80bdba35af42b0815f24e300adec725427e18470170187d869eab95e28fbd27e875e0d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a0b4e66061779ce191db4a208a9941ab76a8c4e0420f1bc38a32a06b4ade9c2e

Files

c98b77bd5e0ba6c6776ab09482436c53.zip
.zip

Password: infected
a0b4e66061779ce191db4a208a9941ab76a8c4e0420f1bc38a32a06b4ade9c2e
.exe windows:1 windows x86 arch:x86

Password: infected

2ba629f434c3ca1b21fe81af6412d628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
GetFileSize
GetModuleFileNameA
GetProcessHeap
HeapAlloc
HeapFree
ReadFile
RtlMoveMemory
SetEndOfFile
SetFilePointer
WriteFile

msvcrt

printf

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 795B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE