65a48b484784a50ec08c650494841db0[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65a48b484784a50ec08c650494841db0.zip
Size

25KB
MD5

aa702c13e9f480fe92eaddc644c6780d
SHA1

f3bcc5c5712ffefa70954020dfbf35aa6a6e0fe0
SHA256

4600533f8a4c6491d7c87f3e06fff0edb258c1474f9a0a5f1ba4d4ce7b953fac
SHA512

f9781113c2f4d627c075166b8e5dbeb7b532c01854eb6af09eeb97494751f0ebeae50ea8fa658fffe435d254f672885d0978d53bdd2fa28c0508f48035b9119f
SSDEEP

768:b07KiLLD/xrjRG6wWh5PiaRXHkAUY9ECNil1zm:IVRR95PiaWADCCcj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c6eca640d0e3ff8838cf4c6169c872bf7503ba7bdb29a67200191ee0e3ff3d30

Files

65a48b484784a50ec08c650494841db0.zip
.zip

Password: infected
c6eca640d0e3ff8838cf4c6169c872bf7503ba7bdb29a67200191ee0e3ff3d30
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE