da674d4faa458f7772f31f050e22c3ea[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da674d4faa458f7772f31f050e22c3ea.zip
Size

1.3MB
MD5

65f5880c203536ec6afe288beb0c0f31
SHA1

0314f1c788103ce062f21b133ede7aa169667c67
SHA256

19e81ec1164092621003c659811f32d80d9c797105d7512e70497b88446d262c
SHA512

273c485ee3dea22a3c946f538b4ae06fad1d229e7b038490286897a314d91d6b98455f31fcd27cf815b456e30252d97df8672a328371a69684a9a2b3eb52db2b
SSDEEP

24576:z272SLdx1xtBW1Z8fcwI4xPs/Wie1bSIJ7KrDptdJ5QOzumk9V:S79Ldx1rk1ErI4/ieREr19fu1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2d3f1362810906bf0522a3d0f4ff1400adb57539169f1b32b9dee249e9feff77

Files

da674d4faa458f7772f31f050e22c3ea.zip
.zip

Password: infected
2d3f1362810906bf0522a3d0f4ff1400adb57539169f1b32b9dee249e9feff77
.dll windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ