f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.zip
Size 252KB
Sample261024-vgr4wsvzft
SHA256 ed4058654e9820a81a5982c360b4588c67d6919493823efd444f8e95065eed34
MD5 2951c10ebe8eceb1b2d3d155723b2d3e
SHA1 96797b47717fcb3d6f647da445714cc169f527d3
SHA512 780b99221faac02f2913aa999bf5ced20bcd77f25ee3d015151731936d9a578ac05911ac92ded1a80286a95e67179a48206b3127dbe191a0e56b0d7a27b80beb
SSDEEP 6144:IYCuVrYGazBx6dJbU+qLxk5oVPsrW5b/ItvScJK6ce:IYCu5YGatx6dpM1KrobwqqMe
TLSH
T10A4423EF2883D71D27D10BD3766F2D0C304A6728A647B38A2E5F5733ECA6486165D0DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.exe

File Explorer

f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.zip

.zip 252KB
f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.exe

.exe 262KB

f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.zip

SHA256 ed4058654e9820a81a5982c360b4588c67d6919493823efd444f8e95065eed34
MD5 2951c10ebe8eceb1b2d3d155723b2d3e
SHA1 96797b47717fcb3d6f647da445714cc169f527d3
SHA512 780b99221faac02f2913aa999bf5ced20bcd77f25ee3d015151731936d9a578ac05911ac92ded1a80286a95e67179a48206b3127dbe191a0e56b0d7a27b80beb
SSDEEP 6144:IYCuVrYGazBx6dJbU+qLxk5oVPsrW5b/ItvScJK6ce:IYCu5YGatx6dpM1KrobwqqMe
TLSH
T10A4423EF2883D71D27D10BD3766F2D0C304A6728A647B38A2E5F5733ECA6486165D0DA
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.exe

IMPHASH c7cbe7850e8c098258fc0c4af251e643
SHA256 f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60
MD5 d1bd929babb2b4f8fabb8c30b92c38aa
SHA1 14dcb3bf86ac7863a2b90a84b05b306d84f0e091
SHA512 93b82a84dbb11189bbce487f71cbfdcb40b9a713d14901bde0bde2e8f4f88620640b9f9c1444a4311086a396ea069cafb090e3cc06ede9d45d970944b68dee63
SSDEEP 6144:H9WoZ1CR2g+i/6Y/Mexw/jX4gSdUT/1hoJO:HwoZ1e4i/N/Mexw/L4gSdUTtX
TLSH
T1EA442383E3AF09DCCB8DC87984D2B6B2AD38F552DD90CBB5A2A3CE013D91551422DF56
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

244KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.zip

f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60.exe

advapi32

kernel32

msvcrt

user32

generic