740c241785d75b23578d30a8d777afc5[.]zip | Triage

Sharing

General

Target

740c241785d75b23578d30a8d777afc5.zip
Size

5KB
MD5

dfd1885737fa04c8e40cc09dc73b1fa7
SHA1

ea2a7e08f61bd345635735d0319f2c2be9d9af1c
SHA256

d93bf5b9b3a80759a18c63f2cb6a6387c1d4a1dc08a771bd8f94aefc68c257f9
SHA512

1d4a97f83e27b9616e064d6fed1beb10aaa703e09fe74d6f5e198dc1139b3ee5e95041c54832547069edf59f70a4bd9956fc11200815c483ea4409c9ce4e4897
SSDEEP

96:t40nfFrxyUgYGEYTIj4QjadjlFAy1e9l0XiS8AieeoVRuXaL4N:t4IFFKo6Ij4m6jlFt1wyalPoPuE4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d79f96213bb1d01ec370dc79076869b12f7d3235cf801df55a218c9ebc06f731

Files

740c241785d75b23578d30a8d777afc5.zip
.zip

Password: infected
d79f96213bb1d01ec370dc79076869b12f7d3235cf801df55a218c9ebc06f731
.exe windows:4 windows x86 arch:x86

Password: infected

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE