fzc106ba[.]zip | Triage™

resource	yara_rule
static1/unpack001/FZC.EXE	upx

resource
unpack001/FZC.EXE

fzc106ba.zip

SHA256 9f3ac30284fd850bd0f56897cd9f76525678f72c3ce8b0fd8ddd9b3e40dd61c4
MD5 fc6130c873fb4c4b467526b6edb3da13
SHA1 c46fbfa602c90c06b8ac69b5a556eba2bd00fa6d
SHA512 3a7c8fcf83b9355ecccf70613e771a7ebcfd88ffeb3edaa8bb05d2e20a01f1abd57f736abce2b71983d53e97145fd53815a72683bde18816fa6e8e471b898a5d
SSDEEP 1536:659oZtiRBJ3AGfH702rr8WZ9T4GryiLtdk1iVN14BzYAqv:H+RBVAGQQrXTXLt+1iVoRqv
TLSH
T13F53F10E3EBB3252F9B513B509E937306AECACD616CBB6DDEC147933117568C1946708
MD5 SHA1 SHA512 SSDEEP TLSH

BFORCE.TXT

SHA256 27f0c02eb2fc4cc966de7eb7d857736c18a198e3d1c1ed6bd81e56afad6e39bd
MD5 6441ebb1d5d495269212849faa2f2bbc
SHA1 a941aaed5d383785a64f876ac9ec4c3b60c701b2
SHA512 44ada633cfc1bd66df4f181354f36d73d01aebd3e111cf49fc10ac10cf2a3b00e95322afc7394e1a76043920ed0795bf647438ffcf8a38c7d0339d216dd56493
TLSH
T1915121278248227800758763861880E2E325909F737819A179BCD71C3BB6F56F2F6DD8
MD5 SHA1 SHA512 TLSH

EXITCODE.TXT

SHA256 8d746ce3b5f0865ed6e9ff14ecf262357b6773b85af29b143d423f5b00406e34
MD5 d3c4ef987b010522a525626e19422bed
SHA1 fa0e8325b2aaa39d2fef61f3b9649a057182dd04
SHA512 2e9bb9cb6d099f68dcf58f681494141e300d80af5be4efbf9be594fabcd3ffb17f16625495e2823ee0334533b32123408a978e5bb4e18001f91face5b5ca31d3
TLSH
T1F141619B2C55122A57F040E12A2152F1D338D27FDB65335224BE876C327ADAA92B60E8
MD5 SHA1 SHA512 TLSH

FZC.CFG

SHA256 b3c51ca908fc2ea3909d1c81650ed3160443e44c0bcf641bb3b33131bc60e614
MD5 65f263b0a9f5011de88f6640b64b1e98
SHA1 4bb9ea02d64e2b05bdecf4e302a676f7d8f44e90
SHA512 931c102ef92a7f2b89a256341bd02f6beb5d9ada9a971f99492c4454cedcaa993268041788b7f851e089b0a72b4f06029d1fa373de877e376876a5424dfb8a69
TLSH
T1CC8163163F93132A0571C2A28304E663E356627D81379A50746FA19C338BD9F467E9EC
MD5 SHA1 SHA512 TLSH

FZC.EXE

SHA256 d389382fc33b4dba1220c1f0686016c1c998221f8a141bae0f697263067a0e28
MD5 6610d6bcbf280bd98624a930e9fc8698
SHA1 f4bc0347487d9a09b48b1f5459810cc6266d838b
SHA512 b97b451879e2790b71eed3f5ab058a52f0e6122f465ed04e78dc8f953afde957f9327d144e50d7b90bee6765dbabc8cf6dbd1c5b9a9671471c718e75499a5a24
SSDEEP 1536:g1aUxS6toF21MuSk4fMZ8sxnjBhCx3GwMRpKlRuj:BgBtu21Mtk409pjBIxWDK/uj
TLSH
T12533F1447D630E60DB5BCB36A3FC085530C24A8F88DBB4178E766AEBD170721DB9744A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

266295

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

FZC.SIG

SHA256 b840616b2575b2c47d5ba442177d75662fd02163a453408e69e54728a30f09d5
MD5 6b189ecf9f63af3824d401e3c8b20a69
SHA1 4d846c3f8c6210b241af551e9f2c7f914311586a
SHA512 7f56c824e5f734c011746d93c9b440b9adc213bf130fd08964a3ac40bc8aadf99738195adf66de7def9f553c59766996d89c0e04028721a46a867cfa98ca927c
TLSH
T17FA0024EA6B9D00B429B15DA9C20583D762D9D975859F4C4E5A24D2894D5F64D243C10
MD5 SHA1 SHA512 TLSH

OPT.TXT

SHA256 cd9a3919e05c45fabf0a0d41c96e83b27981dc446d58a049be9907d1b7544f9a
MD5 2488c2159f4ca6d5f4159986e70804e8
SHA1 ab632512fbd76fa5fe88b984ecac61246f7d2051
SHA512 46d71d6579959d52c4de0207be92e854f179b3941abc583c59c10d9823a1520661d17eb5acfbc719f794c8f1f3f1c2fbe9e332aee2a8e051c0db1685efee56fd
TLSH
T1DA213F4659AC833285FB11C0630EB8E4131486BE32DE262331EA974825CECCA97762A9
MD5 SHA1 SHA512 TLSH

README.TXT

SHA256 c50f728d379fd3b549265d39b131b04c3d28e2826778aac6b1cd3c95df72cee9
MD5 6f7210005bd00b35ff5f90325f2dd38d
SHA1 b6c5e4e92ffde1ce6866cd5aae252fb9920c4de0
SHA512 df0f7e3759686fef59a6588a1f7425f607b0fef2da6b4768a40d8c6c17e6f5a8cf3bab5c49572a45983524ad8617d4aec110face87863a5d1300652e8f2b9039
SSDEEP 96:5TynCb91GTL+xS+U0b7UTxQGs7IxIjwj7jv2pHGN9oCklMvB//5Y8I+T1UobDpSV:5TD9vUSjBCIjmv2hGNg2nJTyTtz
TLSH
T1D3D1B4126EC524B781F2D1E7A7469088F7B2D26F3619310138ED836C3FB216092FDA69
MD5 SHA1 SHA512 SSDEEP TLSH

WHATSNEW.TXT

SHA256 bdaec39a9f9539a007365098b97b915f02ee7e97edf423636a3bc4131d7e637b
MD5 33a87594c190336e393897e0634f04b6
SHA1 6e8cf6814d8f9e11871ea727fb2cfe1265c981da
SHA512 360c39fddb00f585e77f08acdbb053ab3e9ee0bf3489cb9d1d554a847ff9d288dddb18a210ff6f4ef6b7a3d4f3892f4d93d37924c4d607babcb2f59010b7adab
TLSH
T1BE01EF12542D183B417287BBB35501309A3AE25B372CF0019376C50D7867738F176341
MD5 SHA1 SHA512 TLSH

WLIST.TXT

SHA256 4f35bec7d93843093947c9e41a22d521c22cee020e457a8f6e3b4b9bacb19b2c
MD5 6e47b3f368e5352f06e4110b88d0c358
SHA1 56648137b12bd52b4c64e9a57c9ea7354b17067b
SHA512 7701eb18c24a039040a952d6e2ad4550069a391b30ff1cd9c43af809a904aebfd97aba1532a84f64701df55c3c776d2bb05137d08c02ba58394301bea820cb93
TLSH
T1D481542AF75D1B6A1170A346E68D0885F760C16F72810296B8BCD24C3F7ADD462B37DA
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer