549f3d4c3ec66ebe9777b57514458d18[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

549f3d4c3ec66ebe9777b57514458d18.zip
Size

95KB
MD5

7babab64ae30c892b854e36c667717f3
SHA1

7b4d049a7e1c31ee76dfd8759061826dd86e4617
SHA256

ff08f4ec777560ac2e2291c7b8fb5dde44d048ff6e95e32d5cfce862253759d8
SHA512

409b76df4c12f187996fdaec9c6ee516e2024e4ebed4143e2297ae810806e93b5da10496ee9ea970a3b4ca57345f62936acb8dd29c605045ae46093f625365da
SSDEEP

1536:nwAMQIjjZsgsMgi0P2mtLflK9PEiclGhLd2tGwai8+duwQ2oHFAcfaK4JaxQHSav:nGat2RESg78dkr/J4OSaphzC8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/44ef65f79e6f9cca64298770057273ba5185c69de960b6c1be4464d112d54868

Files

549f3d4c3ec66ebe9777b57514458d18.zip
.zip

Password: infected
44ef65f79e6f9cca64298770057273ba5185c69de960b6c1be4464d112d54868
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ