13548db1fffbf0830d539e410df0ebd8[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13548db1fffbf0830d539e410df0ebd8.zip
Size

625KB
MD5

249e95cbeadac67d4c91823585aa9d04
SHA1

47e9cf29b42f3c5ec78430d143014da5d57c1cc5
SHA256

e5b7b1725be57e10f5b661b297d5a20caf89a38f57c8618f102a9781bbcc2b53
SHA512

10446e1daca45b215c6aa51920f727c4fec134f01d45e478b9e7f1419aca831a7eaff5027226f5fea0621770f1c58b826e0bedcc2ce06cc206a5a7fbb23682f6
SSDEEP

12288:mzJ1KKirZBhi6Ey0bxVZ5ympv1e7ojWsywj1yUJ5HrK0Ll3Mc9IK3Z5Aj0/OKy:BhqrmmpvKojNyWFrKaQK3bAfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6da2e23b792b5a999fd70c33a66110742f3f255c81f870ab007456a2ab9c52b8

Files

13548db1fffbf0830d539e410df0ebd8.zip
.zip

Password: infected
6da2e23b792b5a999fd70c33a66110742f3f255c81f870ab007456a2ab9c52b8
.exe windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ