2f2f2cd8a73ea7812eaaec0f0548e308[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f2f2cd8a73ea7812eaaec0f0548e308.zip
Size

404KB
MD5

cdbb5217bee59eb4d9b1757748bc0f60
SHA1

11b8f5b710792d88b47868f122f5d212cffff6e1
SHA256

ab61a90adf6a3f7e1d93bdd31198661242a20b123466e7dee85ade100e13617f
SHA512

4ba5b1a6e65973f992302d8727d6d8b1abd29f32d5f62d591ae191513d59d3c4aad6331bc6d9eb7ed5f3b8fcc6804c314bf625cb886b5acb999bd895681fff17
SSDEEP

12288:zqRfd7XbE4YtXokcxgkdijuNoxx3UAAvo:zmJEFXo3i77Avo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2a855292de9f3688158d1d24e67d39fabd7bc52b49949c30e13b41374c332df7

Files

2f2f2cd8a73ea7812eaaec0f0548e308.zip
.zip

Password: infected
2a855292de9f3688158d1d24e67d39fabd7bc52b49949c30e13b41374c332df7
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.neolit
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SEFCMD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PTData
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ