ef83a8ad5b668f68c89d7ccf566a77b3[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef83a8ad5b668f68c89d7ccf566a77b3.zip
Size

174KB
MD5

b7f525f808ef801a5a037740b4e24787
SHA1

2e0e31e74449266e19308a95871229ea6a30880a
SHA256

28a86c0da80a88204fcfc0e9398dde9325619f83f44ebbe3baedaa29c03d4149
SHA512

13ed860eb661ea54a1c3d7cb7d788b5456c30e0d14c585c2b3250c1f64977c6f552d5f4f1e6d6aced43d2a7e8123f2fbc690338be7f7105512247c8e502a24fb
SSDEEP

3072:AISB2Idgdl+9T7x+eWM94+N8/M0Kgmomu1+2gmxRmeX9q3R/ZyEPuLUIC:AnQKg270ANNj0nZnmpRhyA3t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2cadcd8b1f8ecdb43bff150c0be42223c5bb3237fe1effbf0527ee84da508720

Files

ef83a8ad5b668f68c89d7ccf566a77b3.zip
.zip

Password: infected
2cadcd8b1f8ecdb43bff150c0be42223c5bb3237fe1effbf0527ee84da508720
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE