02964630fa2fa441db35201c0b1f9c50[.]zip

General

Target

02964630fa2fa441db35201c0b1f9c50.zip
Size

177KB
MD5

57da5f2feaa8e8609299312c5efaa5a8
SHA1

56ae673561a1f25c1202d918b189e20047cd23c6
SHA256

7e7236e11df8901a342a45ed3c902dfd55b8ef7bba79cda737f1988a0bc86034
SHA512

f36c8ab52758fb679e3bc2cce0f3584756243052c73dc1e7b7ee8008e978be81597ea27bce98a2f513b534b7494c33e3a49898357043a6f9d547eed9a4e3957e
SSDEEP

3072:TyWu34INOjAMSoeF33TwhrA3lb9Wg56GeDwZ6O+p1HQnndTvRSmJm4ft:3uT9Chc3F8gOP1HQlRcmt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/618c4ad069d04dab7bce29ef0cb118e613a6ce18d1f8d40fb1bf826ec9af7319

Files

02964630fa2fa441db35201c0b1f9c50.zip
.zip

Password: infected
618c4ad069d04dab7bce29ef0cb118e613a6ce18d1f8d40fb1bf826ec9af7319
.exe windows:4 windows x64 arch:x64

Password: infected

3c318dc08aec80512b1ac3a404454c57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__getreent
__main
_dll_crt0
_impure_ptr
atoi
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fprintf
free
getopt
malloc
msgctl
msgget
optarg
optind
optopt
realloc
semctl
semget
shmctl
shmget
signal
strtoull
toupper
warn
warnx

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 464B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

3c318dc08aec80512b1ac3a404454c57

Headers

DLL Characteristics

File Characteristics

Imports

cygwin1

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 72B

.rdata Size: 1KB - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 288B

.xdata Size: 512B - Virtual size: 184B

.bss Size: - Virtual size: 464B

.idata Size: 1KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 72B

.rdata
Size: 1KB - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 288B

.xdata
Size: 512B - Virtual size: 184B

.bss
Size: - Virtual size: 464B

.idata
Size: 1KB - Virtual size: 1KB