c4ed5d559950cc56287ad60b05beac55[.]zip | Triage

Sharing

General

Target

c4ed5d559950cc56287ad60b05beac55.zip
Size

85KB
MD5

86f86fb58c804e9fe56c951da9260baf
SHA1

6c396f352e723d2b41443d86982f05075bf9b228
SHA256

b06faf72938370030e2895c6515c15a9f8476275749c38f9bf55d2a920817ecc
SHA512

b9bfa6e15fb19f6dba9a887f03ed8e0154478ea87adbd8aa726d51d329bf7de57bec301aa0e393da2ada4de5cd8f2b1c15f95922599663d4178302481048511f
SSDEEP

1536:KBMM9FhRCN2zVvkZWqs8IrGsR9KH2ZyuyOC3fvvPQ6p8EV0hwkQGqXD4lX4bm6eH:KBMM3swVvehsge3BCf6WkuMF4bZeZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9164d0ee7461da55c7eec99e3248024148f4b4cdd7295d72283c3661c6db92da

Files

c4ed5d559950cc56287ad60b05beac55.zip
.zip

Password: infected
9164d0ee7461da55c7eec99e3248024148f4b4cdd7295d72283c3661c6db92da
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ