f7db39160fc1d2d6a7656124b18a1a18[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7db39160fc1d2d6a7656124b18a1a18.zip
Size

36KB
MD5

798d7deb4f96ea4dd304e3a856d6fe61
SHA1

1c2fe2681517f208c110b88579a1febb36ea0bba
SHA256

da5162465ba7618bcab63b05cc3d04c74bc56c5421609b2d7c8e5c7437607ea5
SHA512

8f2ec7cd9bb99800bd6a3b015ce1df520ffee4e1a9bf544c0f6a35fd90ce3cb061c5ca51e2e235149d7e2858456d61088c36194d4daa7f71ee33c7c490ae6081
SSDEEP

768:1fUapF/TUlhTsKFGt6CBqQ06XxMc3/MUu49sZI/bSzej3:1f51QlWnBqQ06hMcULVAj3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/59765b3d2b64984f23529acdf9def9178bac528428335f662e5bac2d1012175e

Files

f7db39160fc1d2d6a7656124b18a1a18.zip
.zip

Password: infected
59765b3d2b64984f23529acdf9def9178bac528428335f662e5bac2d1012175e
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE