06c4f97b88b714aec4cb7163611dd23d[.]zip | Triage

Sharing

General

Target

06c4f97b88b714aec4cb7163611dd23d.zip
Size

7.3MB
MD5

f8769d266d78045646d4b7982672263a
SHA1

f9ebdffe05cfe48018370d9d5f18af87db43c93b
SHA256

e192f67c3992906c653b55b094f4f3fa7a59cca92a99d8d1fc6bc17523bd22ad
SHA512

be36ec5e238b35c076081f0c4818ada2dacb790f5f55beb26c16b9d72f6ced9aba87ba5bc4b3c45a4d5227f73ee8be03e5af4f59ed9bcf3150ab3a17d952e721
SSDEEP

196608:qVeTKjAqfTJktz406SdnluVvzU4kgojNV3Ub:IZflUzuvzSg+NVkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/149bbe9ffbcfcd8b8d2693b8f170c8341e1c6c43ca70ddcde76180049865db45

Files

06c4f97b88b714aec4cb7163611dd23d.zip
.zip

Password: infected
149bbe9ffbcfcd8b8d2693b8f170c8341e1c6c43ca70ddcde76180049865db45
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ