f6fc33d78500122206be99a7a01995a3[.]zip

General

Target

f6fc33d78500122206be99a7a01995a3.zip
Size

11KB
MD5

834d27655772a6c1c5c707b4aeb6ef51
SHA1

b0901925b8706ec14c30ef485daf618ca8b687dc
SHA256

856b3314c07da289343d9cd4fca1b61510205c7198d7618a3959a5934dfddc85
SHA512

bd589110ffb9198cff25da18f52980dc7701907fa06f970280bfd8dfb11248a1f635164f9414561b74acbf32a18e4346e41698d066d2179281323ff2e1e0cd7e
SSDEEP

192:Sz3Schp5bhxcCEkVNA1ng65W/EyRG8+qvF5LpCD7A8ckENe6pSXew0/5yMqR:YSchzQCEGA1nJs/EcG05lMUkENpp8etq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/34350f98e5d792b9c822833127f6fc464f62225f960b27e9732cc033c0d22592

Files

f6fc33d78500122206be99a7a01995a3.zip
.zip

Password: infected
34350f98e5d792b9c822833127f6fc464f62225f960b27e9732cc033c0d22592
.exe windows:4 windows x86 arch:x86

Password: infected

d66b543d0999c7628a55690ef9b1c96e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CloseHandle
CopyFileA
CreateThread
ExitProcess
FindAtomA
FindFirstFileA
FindNextFileA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
fwrite
malloc
rand
signal
sprintf
strcat
strcmp
strlen

shell32

ShellExecuteA

user32

GetForegroundWindow
SendMessageA
SetWindowTextA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

d66b543d0999c7628a55690ef9b1c96e

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

user32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 128B

.rdata Size: 1024B - Virtual size: 752B

.bss Size: - Virtual size: 496B

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 128B

.rdata
Size: 1024B - Virtual size: 752B

.bss
Size: - Virtual size: 496B

.idata
Size: 2KB - Virtual size: 1KB