General

  • Target

    a.zip

  • Size

    40.0MB

  • MD5

    ff178b67e372981598390898880ba9b0

  • SHA1

    790568c86a890853177f9bb40978149cec8ce6e2

  • SHA256

    ceea0457f178b5e19d8ef1aa7c7f7b5ce5e3fcc7f48b0f1ac5da39ba290819dc

  • SHA512

    e9203bad3b5251b99b8f249ad6973116b2d37dbc6f80666707b56f30d5ba6d1ea49ecd08c1e4b84f4376770840e195915e82920b2c0f58aeea765c48d1716284

  • SSDEEP

    786432:WXNBctmUJUcGRdzVV6YnSFdWDxkjvyVzRBUPtFADd0QX6pytIgmSHvifm2Fpc96i:WXNWtKc8zVVUsxwvyiPtFI4pytIVSKNu

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a.zip
    .zip
  • W2
    .pdf
  • a.exe
    .exe windows:5 windows x86 arch:x86

    e456fbce099e309bfeaff191fcf3b1ee


    Code Sign

    Headers

    Imports

    Sections

  • msimg32.dll
    .dll windows:6 windows x86 arch:x86

    35df53ce9fc03786a6a1d9def6f6bec8


    Headers

    Imports

    Exports

    Sections