79d6be8f0cb4724543ca4de45395b6e6[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79d6be8f0cb4724543ca4de45395b6e6.zip
Size

14.6MB
MD5

4b4d836e812f5fd269d2ae02b13eb4ea
SHA1

b4a59c3aa826e654af858ef4b453553c529a3e6a
SHA256

b9d3fd63c926ec0bfa125995df6245b4d2c7199adebbffd8c1d6e4b3628ce2fd
SHA512

e242a742639a6da9440bc1219880a4afb1f8fe4b44bd7709703b2451b02cb28b528e330637e7c0edcc99cdfed74becb96c1ffe45db70b5e4bbac1f0e78ece864
SSDEEP

393216:ss4F+c8NuMqKyGM9M8dr+vThgym5V0BmsIc6Ze4q6TJEe2sw3O8w9qJ:B4E52GM9j+vPMZcmhzn2sZ8xJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3cc767db23494a5dbe82c76d4ad4ce3b01369aad602811e7bc93cbbfbbf32bc3

Files

79d6be8f0cb4724543ca4de45395b6e6.zip
.zip

Password: infected
3cc767db23494a5dbe82c76d4ad4ce3b01369aad602811e7bc93cbbfbbf32bc3
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ