17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775[.]zip

General

Target
17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.zip
Size 1.1MB
Sample260508-jkpmdset6v
SHA256 fc4ccb2ff1f597d949b918eafef106caa446f3b04bd83222da71facf6dae988a
MD5 2e4f18168b65bb435ec76932f89dfbf9
SHA1 5a9132b530be4c5f58de3bf821b6015a2f870faa
SHA512 93e6bf87b74da0656261386797bdbd51c175a716b9ea6d893ffa9a923a37c2e4541f434148907b836477363f16e5c1c04e60b28cb746e404830acfc34f861d65
SSDEEP 24576:moDQ1q7XDSni2yXpLfUEfAocJNsD80H+kGcuUubIf3zjdOVEpo3wUtE:mwCWSnLhCAom4vGchuU3aB3wUtE
TLSH
T1C54533F06C83DEF4D9F63624FBC349123A29FE027E0149519C56D42F24E977BA298A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.exe

File Explorer

17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.zip

.zip 1.1MB
17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.exe

.exe 6.8MB

17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.zip

SHA256 fc4ccb2ff1f597d949b918eafef106caa446f3b04bd83222da71facf6dae988a
MD5 2e4f18168b65bb435ec76932f89dfbf9
SHA1 5a9132b530be4c5f58de3bf821b6015a2f870faa
SHA512 93e6bf87b74da0656261386797bdbd51c175a716b9ea6d893ffa9a923a37c2e4541f434148907b836477363f16e5c1c04e60b28cb746e404830acfc34f861d65
SSDEEP 24576:moDQ1q7XDSni2yXpLfUEfAocJNsD80H+kGcuUubIf3zjdOVEpo3wUtE:mwCWSnLhCAom4vGchuU3aB3wUtE
TLSH
T1C54533F06C83DEF4D9F63624FBC349123A29FE027E0149519C56D42F24E977BA298A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.exe

IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
SHA256 17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775
MD5 484cd0f2a89ff5116b4018db4bd00f0e
SHA1 aad8254667bc544cc2b17bb7351dc5f5be0a0967
SHA512 9c87e132dab55dd12a4213368bfbbc79da2075a1c5ace20a7e3b73317ae700c582be00277e258dc532b2646b04157a76c8772ef35d4f58222b73fb7573335cc7
SSDEEP 24576:K9r8qB2LMetCciWSXiCwKKgmYgmOjofysEdjOdk4OzURqVVb3e6zLxOtTOt223xk:WjwFjoKs8gzKFeA+Ot2lmQgYK1ezd
TLSH
T1977605057ED986F2C2875E312CABB32AB72D51145B3D5A53CFE06D9EECBB3601C12648
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

72:01:43:4f:04:35:13:5b:96:01:65:82:47:fe:50:98:3c:29:e5:dd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=neal.fun

Chains

May 4, 2026

CN=neal.fun

Minor OS version

1

Major OS version

6

Entry point

367376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

63KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

988B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.zip

17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.exe

PE Signature issue

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.zip

17df57b9e3925e6367228e7b08f2119dc6df374acf1f1fefc5d843940000f775.exe

PE Signature issue

kernel32

generic