8d95194306fdb8e48559cfbde0958702[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d95194306fdb8e48559cfbde0958702.zip
Size

340KB
MD5

eb88d60ff83622cb50f4145bff5c17c2
SHA1

7f4d3477523fea26f4713f49547110a4621c580e
SHA256

af0da2e289be2c39e01c733152e76cfa6b9992f81b96d45055e4ddb77ae18724
SHA512

f5aad94069aa6e8c88507c3775790c0afc9bd5ac1de7c368798aec0724e1c3cc6979906ec22bd121897cd6076505bed389b04d7c5807bf4001a46ee673fa47c0
SSDEEP

6144:5720PKKWv0WI8dNQwC+hS0YKjXzNi6Ep5IGivijdFHS0G4+1inu+YpDhYUKHNAlz:R/ZWvq3+hS0YKjXz8yajdNSGsP+YD77N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/03140c9bf304711f69f85eceaaae00e8ba3aa92fb140fb038a69cd37ae2bae14

Files

8d95194306fdb8e48559cfbde0958702.zip
.zip

Password: infected
03140c9bf304711f69f85eceaaae00e8ba3aa92fb140fb038a69cd37ae2bae14
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 429KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 18.1MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ