SecurityScanner[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
SecurityScanner.zip
Size 2.2MB
Sample260930-fw89dsvxhw
SHA256 1762e5986fbb593f5d917794646d4a12b03c6878a3f4e37a704e8b06a45fe382
MD5 3c180413e72cf7c9e9c951aa2d80d25e
SHA1 92d8327e9196a5b6eb879f15117aa21fa036fd3c
SHA512 3a1e7d45682a6543e2f898432da24b9167cb316f24001acb7e607e7c48b0f608ff731a894ccf39f15274d2541c41a1108281681102b9da9b2605d4f039f9f725
SSDEEP 49152:1QXr8nMhyDJZ3jPkHNW4Hux6la08juHNJqLckR:1Or8nMcDLbkHMQG6kPSicY
TLSH
T1E5B53314DD69A0F55788789B4FADE89178F8A2B9F19F77B40CC85D5EAA803643833CC1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/[email protected]

File Explorer

SecurityScanner.zip

.zip 2.2MB
[email protected]

.exe 2.2MB

SecurityScanner.zip

SHA256 1762e5986fbb593f5d917794646d4a12b03c6878a3f4e37a704e8b06a45fe382
MD5 3c180413e72cf7c9e9c951aa2d80d25e
SHA1 92d8327e9196a5b6eb879f15117aa21fa036fd3c
SHA512 3a1e7d45682a6543e2f898432da24b9167cb316f24001acb7e607e7c48b0f608ff731a894ccf39f15274d2541c41a1108281681102b9da9b2605d4f039f9f725
SSDEEP 49152:1QXr8nMhyDJZ3jPkHNW4Hux6la08juHNJqLckR:1Or8nMcDLbkHMQG6kPSicY
TLSH
T1E5B53314DD69A0F55788789B4FADE89178F8A2B9F19F77B40CC85D5EAA803643833CC1
MD5 SHA1 SHA512 SSDEEP TLSH

[email protected]

SHA256 077c04ee44667c5e1024652a7bbe7fff81360ef128245ffd4cd843b7a56227cf
MD5 7dde6427dcf06d0c861693b96ad053a0
SHA1 086008ecfe06ad06f4c0eee2b13530897146ae01
SHA512 8cf162f83ebfa2f3db54b10d5b0e6af590e97596ac2d469058a98340bf27de2866e679c777aa46dd530db44c27503d4cea8c34d96cb83b71477a806b5ab7c1b9
SSDEEP 49152:agXTaxuzs1L1ivBzV+3ZYqjuPOBW0wtuVXgPcOU7m6X+d:aeTaxuo1LYvT+3SiiO8LcZOU7XU
TLSH
T1B1B53300E706B086D18930399FAFDB55A8B4E4E7E4DFA7A268D8785FFD503103D628D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

Size

671KB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

40KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

29KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.1MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

385KB

Virtual Size

388KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

SecurityScanner.zip

[email protected]

generic