587ff5d19e20bd009f0c665ee6a34e44[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

587ff5d19e20bd009f0c665ee6a34e44.zip
Size

11KB
MD5

36ece3663131322d4af51bd0744bc002
SHA1

36131b8d706a8d190ae2d2f6deec4fab8a9e054e
SHA256

21652e12cd9f1b6ecdae96b464e62c89b6f03e08c670b6afa1ccdfc6ba44b1c4
SHA512

9e0c9a291d11396d106d62bb4be889e2d432e878dc34f6fef5b7f6b8b93287617dca34d7b432cd100b53eceae4f3497937670f2b16598650899920cdbe2b93c6
SSDEEP

192:uJj/mj/aDsZTBzDALo9qG8N6HNlAj+AfnG+L3sYH3Nn7tJ7/tKAQxLg4SHBXV2:Cj/mj/aDWvALoMcHHAjJ7tJ7mLg4CBF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8ef96640fdd650da1df729596781c84160618f4321d5e1dda7ce89cecfbcb764

Files

587ff5d19e20bd009f0c665ee6a34e44.zip
.zip

Password: infected
8ef96640fdd650da1df729596781c84160618f4321d5e1dda7ce89cecfbcb764
.exe windows:4 windows x86 arch:x86

Password: infected

96e57d09efd03a48c83f1349e435734e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ