f846bd779b7e47676cb014a3e06079c2[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f846bd779b7e47676cb014a3e06079c2.zip
Size

1.6MB
MD5

af350acfb505c0c27ddbf7c15965ada9
SHA1

6845e99f75c08267bd7208d081f23167864db7ba
SHA256

7dc3a225797a1ad390cc799305f4cce2803495cb91709c9ae3881dea19fc947f
SHA512

45934f3259654da89ab178f81e21f63ccd263c224b615fb6d5807c7d46adc2d7d5ef9a8c72dcbec3851a344da1237e17baa49a2edf13dfcb88cb28a11bcdf24a
SSDEEP

24576:6/0SWdMNfWLAbGraQg1vhATWD2vXh5eRyEZT25XYonj2563JA:gWSNBGr1g1pcWSfM50Lnj256q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2fc9f11d7cd63bbeed6061bce75f91f3cb592ef7b5879a23d186a73a4b66e0d5

Files

f846bd779b7e47676cb014a3e06079c2.zip
.zip

Password: infected
2fc9f11d7cd63bbeed6061bce75f91f3cb592ef7b5879a23d186a73a4b66e0d5
.exe windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ