cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e[.]zip

General

Target
cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.zip
Size 4.9MB
Sample260809-c1c5zaydpg
SHA256 f59534ea7cbe330c1b1dc752afaa2109b2ac7bd6a9249609e6d9eb4d23a802ea
MD5 153ccaa001e9c09aed15216a25dd1a9c
SHA1 fce9c1f7efae207f973fbfa7cd8a4b37c413b1a2
SHA512 bdc5642ee4796538471fa855c1140d0650f0c4b5f573ff208827224700102ff61a9f0542515b1c634fd2af76d9bdca43c64cb365ce96aa6ecd6aab7cdd2f9da9
SSDEEP 98304:ZfsTeA5qWDS3GH3JK6OENc+kqUyxviYqYjmNzOwnaVuqG2MKX5QyZcrE:NxTWH3g6mvyxvd5SNzXalJdZcrE
TLSH
T1B636337AADF108D6F1B9E75C46E0AAD4C6EDC4427E36F89503B4B592E64E0DB0034DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.exe

File Explorer

cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.zip

.zip 4.9MB
cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.exe

.exe 5.1MB

cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.zip

SHA256 f59534ea7cbe330c1b1dc752afaa2109b2ac7bd6a9249609e6d9eb4d23a802ea
MD5 153ccaa001e9c09aed15216a25dd1a9c
SHA1 fce9c1f7efae207f973fbfa7cd8a4b37c413b1a2
SHA512 bdc5642ee4796538471fa855c1140d0650f0c4b5f573ff208827224700102ff61a9f0542515b1c634fd2af76d9bdca43c64cb365ce96aa6ecd6aab7cdd2f9da9
SSDEEP 98304:ZfsTeA5qWDS3GH3JK6OENc+kqUyxviYqYjmNzOwnaVuqG2MKX5QyZcrE:NxTWH3g6mvyxvd5SNzXalJdZcrE
TLSH
T1B636337AADF108D6F1B9E75C46E0AAD4C6EDC4427E36F89503B4B592E64E0DB0034DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.exe

IMPHASH 35171f6f6a1bfee47cbc04cb345c411f
SHA256 cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e
MD5 ada02897616fce5050e437292ca42b7a
SHA1 4f41834cf2b46e2f117d71f89d242f18e85db5b6
SHA512 65f5a071e459ea95eb9dc929629d925a28873eb7c1ad299ee0896d7461799624e84d901c4bea947040923c08f50ce74e9e224b261484fa600abd0bd825a072cb
SSDEEP 98304:4FXhBDW7BTVm/GARem7m0vXSbzKBkHJBjk3Ymz2LF/k/WEFN5MN9Q:4D0BTsr7mwXfkbk3Ym6BM/HuNq
TLSH
T1E436339ABDD2E430C045C3BA829330BEB33EB7A188613C5A3AC97D505D96E19653DFD1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4719390

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.!I-

Size

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.|_L

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.{5W

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.zip

cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.exe

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.zip

cc5f663115ee706eb3de099eed4cad8a6980c379c6151726c5849d1599dcd43e.exe

kernel32

user32

generic