e73fcfb4a90e0cd87059cf681322ca9d[.]zip | Triage

Sharing

General

Target

e73fcfb4a90e0cd87059cf681322ca9d.zip
Size

1.0MB
MD5

d9d8b7918ac7119ab2e9d8146aa3be12
SHA1

e72413e500af7dd13d823dc7deafc49cd9e8698b
SHA256

a39b5c8c5a3516c798c36ef7f15985d80026c5826eeda735e7c8f580f619ff2c
SHA512

b83632996ded477415d4066fd0e38750bbf6c10ce183e3be41aed6714737c5bf0891e32acbe0ba18e1bcae32a81648f1366ea9d0630821745f8dec4840ebff0c
SSDEEP

24576:vF4a4lg0YIowgaAgsb82Xqw6Gd9Haf2YjbuLizc9:Z+nPjAgyXqw6Gd9Hafx24c9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2a0d266e50cf28f740a2fd699e2edeece6d9cab77d952354dba49a2a62187b81

Files

e73fcfb4a90e0cd87059cf681322ca9d.zip
.zip

Password: infected
2a0d266e50cf28f740a2fd699e2edeece6d9cab77d952354dba49a2a62187b81
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 324KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 748KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ