SecurityDefender[.]zip

General

Target
SecurityDefender.zip
Size 1.4MB
Sample260930-fw33dazblg
SHA256 15654e1936dda0bfbeeeb8a0c51343c7db1e3e95027962aa646f91c5c0be4ddc
MD5 065596cc737fb06b218aeee3824973f9
SHA1 22aa6ed21ad5abac68c8b9628bc6ca74be75a5d5
SHA512 7499cc5bbfd35ebb02b5030b6f6cd15bee2739cb0e28eed3930ec7cc8b63413e8a688929b7f7e9bf5fd6f13695bef1d904f422153f7c8c66358e1545ddbfd19f
SSDEEP 24576:g3Ys5eVj+3pq2ra9LYvX5/R1nrt6oRfkMagPCBCWtJh8AqC1CCb2Vk7:gVk+s/LYF7J9RO2CBtfmDbpK7
TLSH
T1D96533AA4C83FBFE57C1ECED95456ABC0CE652B43D611A95F1B00489B9480F1CB631EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/[email protected]

File Explorer

SecurityDefender.zip

.zip 1.4MB
[email protected]

.exe 1.4MB

SecurityDefender.zip

SHA256 15654e1936dda0bfbeeeb8a0c51343c7db1e3e95027962aa646f91c5c0be4ddc
MD5 065596cc737fb06b218aeee3824973f9
SHA1 22aa6ed21ad5abac68c8b9628bc6ca74be75a5d5
SHA512 7499cc5bbfd35ebb02b5030b6f6cd15bee2739cb0e28eed3930ec7cc8b63413e8a688929b7f7e9bf5fd6f13695bef1d904f422153f7c8c66358e1545ddbfd19f
SSDEEP 24576:g3Ys5eVj+3pq2ra9LYvX5/R1nrt6oRfkMagPCBCWtJh8AqC1CCb2Vk7:gVk+s/LYF7J9RO2CBtfmDbpK7
TLSH
T1D96533AA4C83FBFE57C1ECED95456ABC0CE652B43D611A95F1B00489B9480F1CB631EB
MD5 SHA1 SHA512 SSDEEP TLSH

[email protected]

IMPHASH 87bed5a7cba00c7e1f4015f1bdae2183
SHA256 b61c53f4137c41aa0a5538fc9a746034b3a903cc4b1b3c8b5f3d3118e1e2bd8f
MD5 e1b69c058131e1593eccd4fbcdbb72b2
SHA1 6d319439cac072547edd7cf2019855fa25092006
SHA512 161a5923dc3a6507cbee3b547edcef4fbfe1dc6a04832c2472b1e635d758d1503a61361c2a83a13a0d8e4607516fda4ae6462a74df66b20a7c93174bbcc7129c
SSDEEP 24576:yYzpj9/AteBV+n/yETaXh8Nv9Xx5/ttAoRfwAy+/CxCWfxBcMkC9e327kY:djRAK+6Fh8zPvrRISCxt5q3SA
TLSH
T15765016739D290B5D7428DF6CE0972DF2FA9172C122A55EEF3AC1091F6B0871E0A506F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SecurityDefender.zip

[email protected]

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

SecurityDefender.zip

[email protected]

kernel32

generic