b263e2eff58cb29c727ced42f796a375[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b263e2eff58cb29c727ced42f796a375.zip
Size

92KB
MD5

9a5e5dc83af4e35ee4c311e08debe6ad
SHA1

9a05dd89d214a07ee3b63b792c822a05125866aa
SHA256

4c9705930afcddfd8f0311e6699ffb85d0dc300c0b5a9e838b3cdc59b383d337
SHA512

76880ffd556a742dbd122553480fa91865d34f45b9e8874aeb936dd2136e3ae19110f511e2641810f94505a6b4cf619fba1163e7c06aa3048728953897d54011
SSDEEP

1536:fZUMLNm9fcK3SWGBCPJqCGoR7RWT+0pYiJt3Ei4MWhL1MkyD8UhHvKwrlQoIP7ay:fOfT3SWGEhZGoRMFpYe14MWhRMLD8UkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/66b93712a634f216e21fec461eeecbc2b7dad0af96daaa86392273642ed57a7d

Files

b263e2eff58cb29c727ced42f796a375.zip
.zip

Password: infected
66b93712a634f216e21fec461eeecbc2b7dad0af96daaa86392273642ed57a7d
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ