wzcw-loader[.]zip | Triage™

General

Target
wzcw-loader.zip
Size 3.6MB
Sample260709-wt91xaf18w
SHA256 e2f88855bf0da246d02fdbcddc7e1961b9533d92bba4939ef4c8e37b2b7de382
MD5 6e35f4430e746bfc33085db2dd67e398
SHA1 d760201de0257bb510e2ea0ebdd9baa0ebe227f6
SHA512 b416d85fc79a3edd0bfb26e1460aefd0fa21fc559ed063086e5fa77c4e13468d551c323084285733c8831582b4c38ac87ed8e252bae2ade88cddda840022a3a0
SSDEEP 98304:+sQ6/7GEiNlsMzEN8lZn5ZKX5adlPWzahTyuIfvUaMHEQ:+YjuNlsMzZlZTksSmoSLHD
TLSH
T12306337EB0660959E5E7B03BFB54376DC63237AD8CA41DB444B22A2270884F6E7463CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/195586044.exe

SHA256 e2f88855bf0da246d02fdbcddc7e1961b9533d92bba4939ef4c8e37b2b7de382
MD5 6e35f4430e746bfc33085db2dd67e398
SHA1 d760201de0257bb510e2ea0ebdd9baa0ebe227f6
SHA512 b416d85fc79a3edd0bfb26e1460aefd0fa21fc559ed063086e5fa77c4e13468d551c323084285733c8831582b4c38ac87ed8e252bae2ade88cddda840022a3a0
SSDEEP 98304:+sQ6/7GEiNlsMzEN8lZn5ZKX5adlPWzahTyuIfvUaMHEQ:+YjuNlsMzZlZTksSmoSLHD
TLSH
T12306337EB0660959E5E7B03BFB54376DC63237AD8CA41DB444B22A2270884F6E7463CD
MD5 SHA1 SHA512 SSDEEP TLSH

IMPHASH 79b3362178937bf9559741c46bb9e035
SHA256 f5cb3b6fc6a8d8c980d0aef61ecb3910a35358f8a1feaf1d852460a4c1e9701d
MD5 3cdb726af3c12f69c561490ef0f4c77f
SHA1 8d173ae55e853ca726079f7cde5f43993bd9bc7d
SHA512 2be5bf163e9443e6ee29ab2d272e1b955d1cb5bea31ed5c58162341ebc25e598db246db03a18c3c4b090bc300a610f463bd2031f333c3696fd3e7cda2df7598d
SSDEEP 98304:4sEwnZsyVW9YLXn54lkiILV259PaNeNTo82Pb0c0NZx:FEwnZsyV9LXviMQCcyszNX
TLSH
T1C616233D74211814D05B7336BD6C2108D3661F9B2398EBB0988FBB183BF7963B5A519B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

4432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths