cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.zip
Size 1.9MB
Sample241126-yalkbasmhl
SHA256 61ff7a70797605f26ecddd9e4fef516ee312af370872f46a3222dae01ae7a13f
MD5 fd40753d8ac34d61b054c1f74c409ed4
SHA1 8b44d00dd36fa8404f3acb806dbde362308636bf
SHA512 593e755d8bca979e2bce76a8511aa7031aca1cdb566e13c075d37036837f3083f3a1d5a11cf0b7c1daf8f8b9a48bed743faf6870fc0f513feaa8d3690ed501cd
SSDEEP 49152:P2ZTHCQT2xhJNvg2i/9FV61QKfkbVNiCNQ:1QT2xDNo2iWQF5pQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.exe

File Explorer

cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.zip

.zip 1.9MB
cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.exe

.exe 1.9MB

cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.zip

SHA256 61ff7a70797605f26ecddd9e4fef516ee312af370872f46a3222dae01ae7a13f
MD5 fd40753d8ac34d61b054c1f74c409ed4
SHA1 8b44d00dd36fa8404f3acb806dbde362308636bf
SHA512 593e755d8bca979e2bce76a8511aa7031aca1cdb566e13c075d37036837f3083f3a1d5a11cf0b7c1daf8f8b9a48bed743faf6870fc0f513feaa8d3690ed501cd
SSDEEP 49152:P2ZTHCQT2xhJNvg2i/9FV61QKfkbVNiCNQ:1QT2xDNo2iWQF5pQ
MD5 SHA1 SHA512 SSDEEP

cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690
MD5 ee9c5875f526c3f44381beb36b6eaa62
SHA1 423ea51703796def5f3449b68c8bc62298187766
SHA512 516a491737a3983832e22659f2df44f88d2dd172fa142bf41282c2b56d12b7ac90147b6786491a0dbb77d18c71d1ae6b24bd0236530671e866b9a9fbdd12ee86
SSDEEP 49152:A1t85yCgjs/XJlrig6LfarKLYoorkGNlaK1C4:1Ajsv/rigDrKxorpna3
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5124096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

183KB

Virtual Size

416KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

836B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

cqnnvyhp

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

zjdghvcx

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.zip

cd0973917f80520e71b932aa1c2ac651794b4da6ba5cb85de4e8910783d35690.exe

kernel32

generic