efb48d8864a0bc4252a7af223df33a9c[.]zip | Triage

Sharing

General

Target

efb48d8864a0bc4252a7af223df33a9c.zip
Size

4.7MB
MD5

3b2e468142ea31b59c1ba818db7c44d3
SHA1

bceeec94a6b46d9d50b42ee835e97ae8606328ee
SHA256

c6fb1ae15d3b9e12048798fe28fd5c4ccb26e56a11b649822e69953179fcd80e
SHA512

a8900d6db6d1c67b1a66a8e033c980ec72231f8619c7e888948a3250861b0db5a50693f176fa9df1e6f92da3d8ae57370f424e60033cfad44695b21ba205f93d
SSDEEP

98304:scM6apyM82sskreCQgfdaEneznVjGzOApuTZ+:FoyMsSgUEeznADuTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6423c8259da6b2378188f5eda5ef618af12ff9ea3e135a2d51fb9e405a330c10

Files

efb48d8864a0bc4252a7af223df33a9c.zip
.zip

Password: infected
6423c8259da6b2378188f5eda5ef618af12ff9ea3e135a2d51fb9e405a330c10
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ