20ff9f2685495c8e65abbe8c99f87ebc[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ff9f2685495c8e65abbe8c99f87ebc.zip
Size

116KB
MD5

65eacee84ada6ae53c1d1d537f198ecc
SHA1

a0a7413a882139cc5133579b6ca67a64938fb8c8
SHA256

5307ed7bc2463cede6a001bd809e71e1c5a689c8a4039ceb8624b17783cf1797
SHA512

76b35c5e84ef029b7ed3553dcc0976ea46658b87fb428ea27a2e5aeb4b5786e723f20185385c9b69021afef612737c738667ab826dc2d84da314cd09ac108dc2
SSDEEP

3072:vytigYTyqBd9wSX0r3QZTntecqDS6ni2dbh2+z:vywT99qgF8cB6LlAe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6a4f82541ebca84aa27b2c78e257b7b0e6fc4c4b881467a4ef359ae803d6845f

Files

20ff9f2685495c8e65abbe8c99f87ebc.zip
.zip

Password: infected
6a4f82541ebca84aa27b2c78e257b7b0e6fc4c4b881467a4ef359ae803d6845f
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ