19494605804[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

19494605804.zip
Size

998KB
MD5

4a4c8bac0c9446b1d81dca50a214066e
SHA1

9f070fb3ebe49d08103f1ab77db8f6ef948cc712
SHA256

5eebdb385f043a280bfe25000ce07568494f492c4427de38e17b6067e5f9571f
SHA512

a6a8bb9f140c3f8d56a58006c7ac12bfdb012c06260a70dd85709f6e57e78c450e6e0212cec86fac24adb8b837444a0394bea713fd6a39e7554723526c6c7f57
SSDEEP

24576:qw7nX0DkoHoUmIX/tZvSAi3QvQLkrTFX5vDSEp:BYkoHUIVR9lrRxDSEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/13531bd403e5f8f607bf16144c38ffd94004eafa8e6a098628b915de07ba432b
unpack001/1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff
unpack001/77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5
unpack001/bd26724bdc8c5d9cb65d361231048725fbc31072d4c457c23531bc4333460011
unpack001/dbd301f710d45acdd639cda5cd47a5453b9abb8a361ed250bfc47de70318fec6

Files

19494605804.zip
.zip

Password: infected
13531bd403e5f8f607bf16144c38ffd94004eafa8e6a098628b915de07ba432b
.dll windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

Entry

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff
.dll windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

Entry

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5
.dll windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

Entry

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bd26724bdc8c5d9cb65d361231048725fbc31072d4c457c23531bc4333460011
.dll windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

Entry

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dbd301f710d45acdd639cda5cd47a5453b9abb8a361ed250bfc47de70318fec6
.dll windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

Entry

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 122KB - Virtual size: 121KB

.rdata Size: 512B - Virtual size: 164B

.data Size: 117KB - Virtual size: 117KB

.pdata Size: 512B - Virtual size: 48B

.rsrc Size: 512B - Virtual size: 424B

Password: infected

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 158KB - Virtual size: 157KB

.rdata Size: 512B - Virtual size: 172B

.data Size: 117KB - Virtual size: 117KB

.pdata Size: 512B - Virtual size: 48B

.rsrc Size: 512B - Virtual size: 424B

Password: infected

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 153KB - Virtual size: 152KB

.rdata Size: 512B - Virtual size: 204B

.data Size: 117KB - Virtual size: 117KB

.pdata Size: 512B - Virtual size: 72B

.rsrc Size: 512B - Virtual size: 424B

Password: infected

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 148KB - Virtual size: 148KB

.rdata Size: 512B - Virtual size: 220B

.data Size: 117KB - Virtual size: 117KB

.pdata Size: 512B - Virtual size: 72B

.rsrc Size: 512B - Virtual size: 424B

Password: infected

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 512B - Virtual size: 188B

.data Size: 117KB - Virtual size: 117KB

.pdata Size: 512B - Virtual size: 60B

.rsrc Size: 512B - Virtual size: 424B

.text
Size: 122KB - Virtual size: 121KB

.rdata
Size: 512B - Virtual size: 164B

.data
Size: 117KB - Virtual size: 117KB

.pdata
Size: 512B - Virtual size: 48B

.rsrc
Size: 512B - Virtual size: 424B

.text
Size: 158KB - Virtual size: 157KB

.rdata
Size: 512B - Virtual size: 172B

.data
Size: 117KB - Virtual size: 117KB

.pdata
Size: 512B - Virtual size: 48B

.rsrc
Size: 512B - Virtual size: 424B

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 512B - Virtual size: 204B

.data
Size: 117KB - Virtual size: 117KB

.pdata
Size: 512B - Virtual size: 72B

.rsrc
Size: 512B - Virtual size: 424B

.text
Size: 148KB - Virtual size: 148KB

.rdata
Size: 512B - Virtual size: 220B

.data
Size: 117KB - Virtual size: 117KB

.pdata
Size: 512B - Virtual size: 72B

.rsrc
Size: 512B - Virtual size: 424B

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 512B - Virtual size: 188B

.data
Size: 117KB - Virtual size: 117KB

.pdata
Size: 512B - Virtual size: 60B

.rsrc
Size: 512B - Virtual size: 424B