4fb87954711e42a38f08442e0c7538f1[.]zip | Triage

Sharing

General

Target

4fb87954711e42a38f08442e0c7538f1.zip
Size

1.5MB
MD5

39d0f197412953021b8475e8c185192c
SHA1

fa65d936313ab71a62be97772270807eb5c6da9a
SHA256

81a6c010fa60d216284f80c22e8d93b741e93ea4b5170cc3eb94ae0a2057ccbe
SHA512

d21a4de51e5d501e14149e5e631dac890bf18b5b0495bc13d275aac6bfd083461cc50bb68d1e7c1e197cd1a6b0dfb6cc38b2cea24aa5cc10fd790e44eb52ea79
SSDEEP

49152:l6bLxkLGq8MO0R6NHxfv64/qRk/Pe4m5Fh5SV1:l6bVq+5NHE4KHf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1d1458c581858b8fd725fb83ddfc8d6685f3c59615e91140a4bc1ac702c1e387

Files

4fb87954711e42a38f08442e0c7538f1.zip
.zip

Password: infected
1d1458c581858b8fd725fb83ddfc8d6685f3c59615e91140a4bc1ac702c1e387
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 484KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ