6cbe75a24101810183dcdb4d19f1dcf6[.]zip | Triage

Sharing

General

Target

6cbe75a24101810183dcdb4d19f1dcf6.zip
Size

5KB
MD5

adc50a744d9c65f6e31f3a2b1c8628c6
SHA1

267977fa7210de07d28ee98bf0593ab50090ce46
SHA256

b937aa308005d2474148323444d90e28faffdc34a5b678058e1a9b1082541221
SHA512

1c813d9aa3d9233a76931f8960f2d7cdcf589bd68bd9fac83107a40d7a12fbb4596bce9c8feb764f47c5a57aab4d00ad588161011eaeee89076cb760af295c37
SSDEEP

96:rmZ2Gz6e4pxyNFA6b5R3PZ3P399ClaJj0U6G/f6/kFNGBknJ8UF9XSgQg1LdJL:rmZ2GaQNFAKR/Z3PtlWkPGOJPF9ZQg5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6c5522c7b67e6e0a0e251cb514504b3f6a7f0657b5eb8c51a99fcb8be98c9639

Files

6cbe75a24101810183dcdb4d19f1dcf6.zip
.zip

Password: infected
6c5522c7b67e6e0a0e251cb514504b3f6a7f0657b5eb8c51a99fcb8be98c9639
.exe windows:4 windows x86 arch:x86

Password: infected

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE