86554cc5c22f1fd03d26d676398befe5[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86554cc5c22f1fd03d26d676398befe5.zip
Size

7.0MB
MD5

baac4fdc945c077606fb8076e0023d11
SHA1

164ba5f2bf2658f4493873369e233b618faebd1f
SHA256

baa65bd24d47bca08a6322bfe9e7426e99553f216b68e2b7580152a7963c3d76
SHA512

68adecdd742241e887cdfec9849f62763a605e273afce82681cbc2fb8c87d93837194b0b9eb98870944e036cfd349628dd9f2a8c5b9b501b56cf4911dc340384
SSDEEP

196608:G1lS0lbHTjRctxptYYAUSDk4MlQsvAma4BUsEzR7mXPdxn4xcpY9:G1lRVHnREnARwfA4BUT04iG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7c189a86ec0b9ac2090460eaecd974e7f44c78ebbbf0ae7a99eaea3a63ad7bce

Files

86554cc5c22f1fd03d26d676398befe5.zip
.zip

Password: infected
7c189a86ec0b9ac2090460eaecd974e7f44c78ebbbf0ae7a99eaea3a63ad7bce
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 813KB - Virtual size: 812KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ