vdfinf[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
vdfinf.zip
Size 674KB
Sample260608-x8nxnaev21
SHA256 fd71c55a3ec41f7f82b5ab03033aa40cb366c524b76a4425d0931525ad7cb2c2
MD5 040da83c216a37ca48111550cf22fc68
SHA1 f23ecb6601c07a654cca00d75c5e66ea6889f696
SHA512 c9d86456cb4df57f71c0abccdf14727996bf06fd87a2da8d898593148b4ff6f70825a9cf92c4e8cfc6ac0e9d505290e7824eec2c90c617e7eb8d060757c60069
SSDEEP 12288:7sxK0hYM4c9c7NcbDfwSWx8OXCT3nEiwBU4USnz8okr3dUH6OWD+WwzPfEw0dH/C:7LWYMh8cH6FuEi4UAQoQ3W6OxxzkwMHa
TLSH
T1C5E423275CE9544C8FBD4ADDA0F1237B3AF12670C588E9C511CB2A199CB947036B5ACF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/vdfinf.exe

File Explorer

vdfinf.zip

.zip 674KB
vdfinf.exe

.exe 1.4MB

vdfinf.zip

SHA256 fd71c55a3ec41f7f82b5ab03033aa40cb366c524b76a4425d0931525ad7cb2c2
MD5 040da83c216a37ca48111550cf22fc68
SHA1 f23ecb6601c07a654cca00d75c5e66ea6889f696
SHA512 c9d86456cb4df57f71c0abccdf14727996bf06fd87a2da8d898593148b4ff6f70825a9cf92c4e8cfc6ac0e9d505290e7824eec2c90c617e7eb8d060757c60069
SSDEEP 12288:7sxK0hYM4c9c7NcbDfwSWx8OXCT3nEiwBU4USnz8okr3dUH6OWD+WwzPfEw0dH/C:7LWYMh8cH6FuEi4UAQoQ3W6OxxzkwMHa
TLSH
T1C5E423275CE9544C8FBD4ADDA0F1237B3AF12670C588E9C511CB2A199CB947036B5ACF
MD5 SHA1 SHA512 SSDEEP TLSH

vdfinf.exe

SHA256 ca75b9ac0d452ba6461904b95fb53debb694aba58254faa430e3f5cadb1260aa
MD5 26d5ffbfbab7ecf310a6dfae81dbfa0b
SHA1 de8c857ed2c6cd9fe8d32ae819565ed30b269774
SHA512 ebb6a5d689f58dab8a305b83b11da9983aa33476d61db701c3fe0c1894749a1a4c94cc15c2b887570f6dcdc1ced8c72de8eb640f74847ad156bffe21435b20e5
SSDEEP 24576:1IbSPcZonT+8BW5QoCfkI2iiSwt7yo/MWwPmJWW77szOeFEDaSqA4fyil:tOCsRiiSwpy/W3sz/uD4Ll
TLSH
T10F656D22B1D38837E0721B7C8D2BE6945829BD112D38A85F3AE90F8C4F3665179793D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1126740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

135KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

75KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

vdfinf.zip

vdfinf.exe

generic