4008bc6c58a09d901019afb2d70d6af1[.]zip | Triage

Sharing

General

Target

4008bc6c58a09d901019afb2d70d6af1.zip
Size

44KB
MD5

f10a5eef6828a07feb031f25951a3558
SHA1

a9eb9efe0aa99bc38ca9b1d0ad078fa33eb9cb0f
SHA256

50d55e07cfe3857fb23be1d76c3389054a3a8a723f43380505241622eba3a3d0
SHA512

c02f042504c0e4f71d6a7205d40e64430f06979d40238c3828d3747463af59b471dd57e8e832ae02541781b49719123dafebdeb2bc5178994837c24dce58046e
SSDEEP

768:R5pqJMha9QRJWNN5BKKlm56OUF9KE0ds7B/oPIiZ1LkMUwmKnBg:RDqJX9eJmbEv69UIBAPIiDLkBwvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c3de3d25b59fa179eae51b716ffe18645b57a9fce2eed6124d08fa5bb14eca9b

Files

4008bc6c58a09d901019afb2d70d6af1.zip
.zip

Password: infected
c3de3d25b59fa179eae51b716ffe18645b57a9fce2eed6124d08fa5bb14eca9b
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ