70092e7e980e9389ddf79cba78eefb52[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70092e7e980e9389ddf79cba78eefb52.zip
Size

225KB
MD5

ff87cf011a33abd6aeb62248e5801353
SHA1

c490a0f4bad056bc72d79e82cc26047186156dcb
SHA256

7899c54711c5e4e3a11d8361ec613ebdc96e551c0d209bc253ba057038a27087
SHA512

47f57b097038c485492ade8375566c3fc440353f3d63d8199dc5c7fcf86144a3faed0dab1187bdc64661bbba701c02a479c0a69863e1b9e231254027cf90c8c8
SSDEEP

6144:YbwfuoBtz9jZWMThTxg62BA4LDRA7/Rmg:YEhBt3ZT0B3LDG7Jp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cd732c0c2c8999ecaee96a67e95c834b62d112e9ba8ab1f0d16a1b0ba4aa1c11

Files

70092e7e980e9389ddf79cba78eefb52.zip
.zip

Password: infected
cd732c0c2c8999ecaee96a67e95c834b62d112e9ba8ab1f0d16a1b0ba4aa1c11
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.data
Size: 1024B - Virtual size: 996KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE