Ezic.net.zip
- SHA256 e064897a8b78b03f8e95f1ce8b070affa92bd87e35b3b48742a784248bd5480e
Password
infected
Static task
static1
1 signatures
General
- Target Ezic.net.zip
- Size 18.4MB
- Sample261024-eynj2asvbt
- SHA256 e064897a8b78b03f8e95f1ce8b070affa92bd87e35b3b48742a784248bd5480e
- MD5 e1e4a68558f7b2483df448b3d78167a8
- SHA1 7ec824354af0aeb1922bf990004ba47e6f1e9a9b
- SHA512 9200755c677f26bba9a72e4b09804008c8ad77ca34b5a00b4bd851f71bf95e365731a6a0d68a4fce16b4235162d4e0ba5aeb91e415fee95dd56bda1c54573725
- SSDEEP 393216:BDADXDwva/Ob+dBYiA9tzUwwU+ZCGgNcPu0l2vAroAB5Pi1:BMTqAAdTuZCegvArLfi
- TLSH T1631733C872821404227EF18C3B83BF9BA9564A39AD7F56BED00FBD749DB29D4310954B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Unlock.exe.bin
File Explorer
-
Ezic.net.zip.zip 18.4MB
-
Unlock.exe.bin.exe 18.4MB
Unlock.exe.bin
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b0d52146decd4f82264dddd0df1e99a5e4362a1c6f0afed5281224b6c12300cf
- MD5 133e3ba024fc1beff6b95c781a829cbd
- SHA1 477fb8fd3c652a3d2780017a5d45f0f8f6ab77fd
- SHA512 34caad9301be95981b036677150dc90c4d9c1019c3ba8565828397f74321e53a8a7ac24f86e9e465bc35a237dc052dc5044ce47f592770442c4299de98d0d46f
- SSDEEP 393216:U+d2TcYfaN4OtKitnmkKZqHyhhlD46TJmWq7LrOOQxSzBadI1g9uuu8QgfkgonBY:U+d2T33emkacHHiTIzB5Wuuu8Qg8BY
- TLSH T1AA1733D8AB364AF1D1980B357136E5DFFF6C8262CAEAF8A0F5C707195414742C28627E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
19304958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
18.4MB
Virtual Size
18.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ