cb6ce8cf52be51750926054a8d44fa02[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb6ce8cf52be51750926054a8d44fa02.zip
Size

89KB
MD5

d411d7243ea76a18957524eb2c946cc1
SHA1

9e92d42ba4baf1b6483ea36fc8db3976b8239116
SHA256

c165eedb32566f79998dd41563581e132a469507fb9f1a80ff650811df9e688a
SHA512

29a618ad3920bbe3b3e1fcbac07c7b22fb007c14c362b371c6ce2dd8ee14845f12398b61591daaf2f3238347a5227885159043fbbfd6c9c689e0be3427022321
SSDEEP

1536:kqZrKIyXD+6P+crhSJ8GD1KCc1yqnMOZ27TM6VgMTf/npS5QYkx:JZ8D1+ihA8Gpd3qaVgYE6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6b9291c0a62e23490fe5071aa59b3da603e337d34a4e03290d844fc57fa10f7c

Files

cb6ce8cf52be51750926054a8d44fa02.zip
.zip

Password: infected
6b9291c0a62e23490fe5071aa59b3da603e337d34a4e03290d844fc57fa10f7c
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

:N,i~)
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ