2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.zip
Size 8KB
Sample261003-vyc2astbpg
SHA256 d7adc89e8aeacda035336ec4a0a1aeb7e3a239e91b4bc828d06c639772fc83b3
MD5 f0c672a9c60ee9fc83563178a0435ed8
SHA1 323fea2eb6d18b374b032cf5f7d23fa098a4d242
SHA512 d5ba1978305b1502677f5015aa551059a4ec558c2650d556659e583b2b6041a6cbee1a74c577687591ff3bb16601597bb32c7f36a33b8277e42af3731ec8e0c6
SSDEEP 192:w3nwEG1JO3iACZVhs0IDliBbNWETVJ2/30mOsgQYjeNOiJzM:UnjgO3GZVhs0IDliBbEmJ2/30mOsXYjR
TLSH
T1DD029E52800FAD6BD488BD30AE24EA136BE451A30E65D2DC73E6F1A0624DFC2C758E52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.exe

File Explorer

2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.zip

.zip 8KB
2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.exe

.exe 19KB

2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.zip

SHA256 d7adc89e8aeacda035336ec4a0a1aeb7e3a239e91b4bc828d06c639772fc83b3
MD5 f0c672a9c60ee9fc83563178a0435ed8
SHA1 323fea2eb6d18b374b032cf5f7d23fa098a4d242
SHA512 d5ba1978305b1502677f5015aa551059a4ec558c2650d556659e583b2b6041a6cbee1a74c577687591ff3bb16601597bb32c7f36a33b8277e42af3731ec8e0c6
SSDEEP 192:w3nwEG1JO3iACZVhs0IDliBbNWETVJ2/30mOsgQYjeNOiJzM:UnjgO3GZVhs0IDliBbEmJ2/30mOsXYjR
TLSH
T1DD029E52800FAD6BD488BD30AE24EA136BE451A30E65D2DC73E6F1A0624DFC2C758E52
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.exe

IMPHASH 147442e63270e287ed57d33257638324
SHA256 2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4
MD5 0b9bde384dac136914f21b8e5483c409
SHA1 25e750a10bc1d263e969d962f567fc55fbceff44
SHA512 2e1693d52bcf0da6940180380156c216cf3570c8b7bdb16b46f01bdc0962992e9c5352dccec5c250c8f267d723122795a2415751f14e16a0eb717ebef12f3cb2
SSDEEP 192:/V7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2dn9HysLn3WF8qa1Dojjgi:5qaCF31cix+Dc4zjInJ7LGFF46gi
TLSH
T19292D83FE31358E9C506D5B845FF3733DCB139B385A6A32E2724D2B42E106A46E6E610
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

568B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.zip

2db23dbabf20814d496c61778c178ecf7a0da76f199f5476f45b4bbd650a4dd4.exe

kernel32

msvcrt

generic