33386a0a72fe571de161f0b6a0ebb4aa[.]zip | Triage

Sharing

General

Target

33386a0a72fe571de161f0b6a0ebb4aa.zip
Size

404KB
MD5

323474dcb7f6aa0401a8c8ab6c1b52ef
SHA1

f062d6184131a56ef59fa8d9bd997a38ab2dc53c
SHA256

843236e266ef5d582cca149cb8e5b66a12bb23028dd48b57092bbf4a8fdecb73
SHA512

fe2440f14ff404e4f18154a05319d3e09a550cc8e435964be7c3bb033d18f38ed72795faa62b076d40d73e42fabd79ca2d585b1580c6eac9a3120d39d54e3233
SSDEEP

12288:rt6B/yzQGPe+w/u4WctbgDuFvY5jhlt17wTbS0aSAg:ey4+wZauxY5jhltZQNa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f31eb4d10f4c3d322b43349736c86162dbd596342efe533d7ddccc729e89adf5

Files

33386a0a72fe571de161f0b6a0ebb4aa.zip
.zip

Password: infected
f31eb4d10f4c3d322b43349736c86162dbd596342efe533d7ddccc729e89adf5
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.neolit
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SEFCMD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PTData
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ