88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.zip
Size 2.4MB
Sample260910-a4ervsck5v
SHA256 251b81e5087d8637c92abc77c867f51514e176645d15e7685311bf49d44c9ad0
MD5 3ead732443da4c7ae6700c6d26db5ce9
SHA1 7bd456d05afad6c9d2cf22a3ed8cdfb4e65980c1
SHA512 4414c9715916fb33ff1552ea3c294e8c5e35fc92613f06f9dd17c5662c711766a9881fa60849a06806a8d2f26c93f40ef4c388897ec9ddf1a4f81a263f61ee19
SSDEEP 49152:Y+GAOT7ufkdhARAQQ/hvb+IOkUOAuXbaSZJIGnkvIqN0ZKcF:Y+GA2DdiRcVb+fT0lZJM4F
TLSH
T1F4C53311F7AC2D4EFFA50379E24773DDF9A6E26B0EB39307832B4D1A94824675B92005
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.exe

File Explorer

88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.zip

.zip 2.4MB
88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.exe

.exe 6.0MB

88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.zip

SHA256 251b81e5087d8637c92abc77c867f51514e176645d15e7685311bf49d44c9ad0
MD5 3ead732443da4c7ae6700c6d26db5ce9
SHA1 7bd456d05afad6c9d2cf22a3ed8cdfb4e65980c1
SHA512 4414c9715916fb33ff1552ea3c294e8c5e35fc92613f06f9dd17c5662c711766a9881fa60849a06806a8d2f26c93f40ef4c388897ec9ddf1a4f81a263f61ee19
SSDEEP 49152:Y+GAOT7ufkdhARAQQ/hvb+IOkUOAuXbaSZJIGnkvIqN0ZKcF:Y+GA2DdiRcVb+fT0lZJM4F
TLSH
T1F4C53311F7AC2D4EFFA50379E24773DDF9A6E26B0EB39307832B4D1A94824675B92005
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706
MD5 5e7afbc2588e40d0b30a8f45577ed6ad
SHA1 e6fedf604883b4f166d60e329dd07abb994d8bbf
SHA512 b4f1bbe54dad2be4b646a0983c2c20c66a18e75daf2ce968d2e25abda9c102569d31314f723af83bdc8b37c041608c6a7b212349959e499bb809c42eff83813f
SSDEEP 49152:f5SExxGrhzt5HXIxtSMaoyP4E9C3wSh+2lRLJH1QCD+iX6KUqj9gx5fBlVgwu9wX:fvukxtcl45hrfCUjkQqEO
TLSH
T133568E077B8281B0D455EA7A84B7429477B03C5C833533AB2EA9E9303F663D1B67AF54
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

449408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

356KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.zip

88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706.exe

kernel32

generic