5eba6bf8d1538761cf194e6cf27525b7[.]zip | Triage

Sharing

General

Target

5eba6bf8d1538761cf194e6cf27525b7.zip
Size

7KB
MD5

0af676a0c096597a564ea0fb62487305
SHA1

409330be6e8f74d6a07d97608c1130a5f554482a
SHA256

7c018c79678a70dadf16533f564d686361e7e06afe577d51fd7d407100a24506
SHA512

1a79f02a1ed0540f5d6ee21833c58e7c282edb1735dcfe87563a0f455bf2872f414b2624a6763686c73a81709df326435cc147add788b285a70b381089d378ce
SSDEEP

192:DrdsxMkrql4HuGjdfISpgJl5Inbnsef6ZIAYpzJGWK:H6xq49dQSpqyLaWpFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c2ca971858018214c3e9822bf32c38d611ed1c82b3e8824ef3c60d14881fa4f9

Files

5eba6bf8d1538761cf194e6cf27525b7.zip
.zip

Password: infected
c2ca971858018214c3e9822bf32c38d611ed1c82b3e8824ef3c60d14881fa4f9
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE