e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.zip
Size 42KB
Sample260913-cskvvazerg
SHA256 4653da1b6e194eeb2e9ea73ca81593838485501c9404a61fe4ac90c04936389f
MD5 7544d536b149a4942f8b0d5c66559717
SHA1 67b09ebfe82e70a072977ff6c1c5517e05f9a8a4
SHA512 4ef6055782eff94ff2da76b2a437ebf78a8acbbe193e48e2fe4a92c0ebc72c627f423f5f89db785761d05b4177be47afb7be7b55ddcf5e9d1086816fb88660ce
SSDEEP 768:vZsa/a/MvKWqvOhTRsEuBqNUOPik+8w3hekUmOvudOO/BW:v1rS28BqyOPik+NIkUPOJW
TLSH
T17C1302994E407812C687DC1AD6FCA123D0E45424FBBCF59BAF29EF23D456CA462F3500
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.exe

File Explorer

e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.zip

.zip 42KB
e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.exe

.dll 96KB

e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.zip

SHA256 4653da1b6e194eeb2e9ea73ca81593838485501c9404a61fe4ac90c04936389f
MD5 7544d536b149a4942f8b0d5c66559717
SHA1 67b09ebfe82e70a072977ff6c1c5517e05f9a8a4
SHA512 4ef6055782eff94ff2da76b2a437ebf78a8acbbe193e48e2fe4a92c0ebc72c627f423f5f89db785761d05b4177be47afb7be7b55ddcf5e9d1086816fb88660ce
SSDEEP 768:vZsa/a/MvKWqvOhTRsEuBqNUOPik+8w3hekUmOvudOO/BW:v1rS28BqyOPik+NIkUPOJW
TLSH
T17C1302994E407812C687DC1AD6FCA123D0E45424FBBCF59BAF29EF23D456CA462F3500
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.exe

IMPHASH 850c7371b5a26a26442526a0bf1f1e22
SHA256 e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0
MD5 4d7bb4ce6e49f8073d545606124a6f8a
SHA1 a96867b4a53611be0e9c07eaf0adc0aa8b355cc0
SHA512 2ecb484d9d989cadfd1a3b5f0672a721cfa2016f25b20a0eddb5e0819d24fda9c257fb54b5eef12431a236531461fbffebb899420e56c8d410feace8420115c2
SSDEEP 768:MSHTZaikBrr4sWm2hdKyVgKRw/Q+5/szoQKZu3UBnwzLWis/pEcVruz0ZH+XlOrg:5oikBrr4sWhhdsxsugIbisRG0JZhWv
TLSH
T117A3E099A2C2C829C71A807181E72731B7B5FE135458AF6F8960FF333EB5958AD3C521
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

4608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

504B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

396B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

83B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.zip

e13d7b87184371006f337cf3025e0960a8060ab22c8920c34d15329dbb03bcd0.exe

kernel32

msvcrt

user32

generic