85247673965551a2fbde9813376b46be[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85247673965551a2fbde9813376b46be.zip
Size

14.6MB
MD5

3df2d4622f7691ba93d2f5e0cc9c80f9
SHA1

db3e5dd6d0126aa5a57deaa1304241fb85351f62
SHA256

eaf79b4a9d04cacdee282a048edc55daf25167481165dcfd98e97e06e50d4ac8
SHA512

a50b7fa8995e2621795f8a41588e01a134ed14708a80898a2f1e69581e9caef4df9f94249761b9dbe551122a15a0ed65ed2eb91e6f88a65bb986a3e972ccaf9f
SSDEEP

393216:VbQtPDNF3lqWu5nyu9w6MDsBvrbQvUrttpQE6EcX:VQl7u5nyubMD4bQv0ttpdcX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7c73a858cb2cf6c01158ef1936dcfd5306642713bbc9653edc4d05561066bb1c

Files

85247673965551a2fbde9813376b46be.zip
.zip

Password: infected
7c73a858cb2cf6c01158ef1936dcfd5306642713bbc9653edc4d05561066bb1c
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ