b3113f5693b0c0a53c87a5d731981478[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3113f5693b0c0a53c87a5d731981478.zip
Size

57KB
MD5

9daab400ace51fb16ec2e470e0a7ff7b
SHA1

d71a4ed5978c83e1affeaa927983c63d2a0fdc8b
SHA256

33b7ad84e05b77a0f8df1a244b15a2ba75c5da49234bbda143e66f54681dfdd2
SHA512

2882c96070c3a830945d2c9e55c59b5fe5a4becca3b8c3b95c7c18e0a6db421661a77661b7198ca1839920b0f29ac319a0591a8c4afd945d15052a248161ed47
SSDEEP

1536:LVdmDnRt7RByPfQzQVQsWYxJ9G3Qj9sR27UPrQhDhmpSnv:LVdmD/y3QEesWUJw3SuPUF0Sv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/80cd3e7a27c4ddbf04fde5cb158dd56b549c40e90616c33202af293467036bc7

Files

b3113f5693b0c0a53c87a5d731981478.zip
.zip

Password: infected
80cd3e7a27c4ddbf04fde5cb158dd56b549c40e90616c33202af293467036bc7
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ