uwd.zip
- SHA256 0f01f4715df2b7387680668b1241fa612f16ee304a9a0c859532c4c5e3cdea97
Static task
static1
1 signatures
General
- Target uwd.zip
- Size 256KB
- Sample260708-vslfgsev3v
- SHA256 0f01f4715df2b7387680668b1241fa612f16ee304a9a0c859532c4c5e3cdea97
- MD5 d990333aedb98deefe744fe613ac292b
- SHA1 dc9e060c2dc7fcab4630821d722b8f7f36facca9
- SHA512 cb3e0b8c811ba5b774e60d7a6e55aed84c022622a37e38a5dce52cc30fb8422587701af39d84d0044811ecd8e3d6c6b97f8ed603be96865f897ee94801acdbb3
- SSDEEP 6144:IpopoxK7wWe3WRS4dCIm1Ds723lU+4R7kit/uKfIdDD6t+H:I7xKre3ASwwDWb+OkXKfIdDD6tE
- TLSH T14A4422DFE870BCB1F92669A22E7F0C4577D91C92AF48A814AE0D084860742DD49FFDD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/uwd.exe
File Explorer
-
uwd.zip.zip 256KB
-
uwd.exe.exe 610KB
uwd.exe
- SHA256 12bae61fbc85d233135b2364b34ece68bf578db4535c54cdfeb2c8ac67b08325
- MD5 49637e4ae02ad0066cd78eb0ea21ec9e
- SHA1 e875447cd5f5eb7c486a475eba97823678c29962
- SHA512 113b716aed397fb4a8cf19b412793fc0b1a1691922145f833692a8d8069a7e907c8b1e41b139453154b03023dd0ec3362d21e109753dd736d35e8c531da898be
- SSDEEP 12288:zN800y4lJOSdwJ9L4Abzc1LBWBZdnzhvc:x+ypWGfo1LBWBZpFc
- TLSH T10CD42A27B2E4D033DA2E967CBC1E565858357D023D24484E6EE73B0C5A3D641B4AF2BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
435896
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
422KB
Virtual Size
421KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
142KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ