Trojan[.]MEMZ-4[.]0-Clean[.]zip

General

Target
Trojan.MEMZ-4.0-Clean.zip
Size 5KB
Sample260825-ag6basdm4w
SHA256 62dfa5bef3215aaeed8b100ee5c7e9e6b84dee461f3888ec6b2163f03c1fa751
MD5 35937222009a6aef52ca2cba21f81adb
SHA1 7454250c354d8108cf72dcf5fd5511b4a002522b
SHA512 21fb8fbd55db8604a217e000b6b32e31c6b2bb46ba37288ffafd43984b7965dbee5e24703135615b8e3f73fad0725b9d4409b73f7cc7cd22faf0be614c6157fb
SSDEEP 96:rPK8AlTOEpBvUUajnYP56MspX63LIUv0cbSy4WLmNaTbO2Zl2YvuVeIlxmHTsaEY:2gED8hjnYPAZ9o0C0YX9+wIlAHTspxuT
TLSH
T198C19FA583156450D2AC0EF2EBBD5BB32C4550069D6FABC7C6FAC234284D58D7F3650A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MEMZ-4.0-Clean.exe

File Explorer

Trojan.MEMZ-4.0-Clean.zip

.zip 5KB
MEMZ-4.0-Clean.exe

.exe 12KB

Trojan.MEMZ-4.0-Clean.zip

SHA256 62dfa5bef3215aaeed8b100ee5c7e9e6b84dee461f3888ec6b2163f03c1fa751
MD5 35937222009a6aef52ca2cba21f81adb
SHA1 7454250c354d8108cf72dcf5fd5511b4a002522b
SHA512 21fb8fbd55db8604a217e000b6b32e31c6b2bb46ba37288ffafd43984b7965dbee5e24703135615b8e3f73fad0725b9d4409b73f7cc7cd22faf0be614c6157fb
SSDEEP 96:rPK8AlTOEpBvUUajnYP56MspX63LIUv0cbSy4WLmNaTbO2Zl2YvuVeIlxmHTsaEY:2gED8hjnYPAZ9o0C0YX9+wIlAHTspxuT
TLSH
T198C19FA583156450D2AC0EF2EBBD5BB32C4550069D6FABC7C6FAC234284D58D7F3650A
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

MEMZ-4.0-Clean.exe

IMPHASH fa1a2f2198605213f450e3c9a78158a8
SHA256 4bbf7589615ebdb6c769d6d2e7bdcb26072bac0cda6e225a4133ba8819e688d5
MD5 9c642c5b111ee85a6bccffc7af896a51
SHA1 eca8571b994fd40e2018f48c214fab6472a98bab
SHA512 23cc74b5a7bdf70ba789d1730a0009414cfb9c780544e3d8d841be58782b9a9a089969c4295a0da25d07285505992386486d6ff0524e75605b96bb99cd3aaa1c
SSDEEP 192:BCMfc/GinpRBueYDw4+kEeN4FRrfMFFp3+f2dvGhT59uay:AMfceinpOeRENYhfOj+eGdKa
TLSH
T13042E88BBAE05007F1F1C57A24B56738DB7DBB631FA58ECEECB11E429A90C466407352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4837

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Trojan.MEMZ-4.0-Clean.zip

MEMZ-4.0-Clean.exe

kernel32

user32

gdi32

advapi32

shell32

winmm

comctl32

generic

Sharing

General

Malware Config

Signatures

File Explorer

Trojan.MEMZ-4.0-Clean.zip

MEMZ-4.0-Clean.exe

kernel32

user32

gdi32

advapi32

shell32

winmm

comctl32

generic