20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92[.]zip

General

Target
20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92.zip
Size 2.1MB
Sample261026-wf5h9sbf39
SHA256 8fb61486f47e86e86e20c426292579a6583f13c7207354ee202880069dd8706e
MD5 2c758d8f17936e8363a1109667bfef6d
SHA1 4a26aaab13e0604ff5d07444ed17d8a5a153ef8d
SHA512 27cc002482a2e46ac6a0b6ed54c0b10c288c889c7f964309461b18f7df4767776d588bb9638c55d762c8e9f2edd32677a34ec256ca3a9473a911d7ba4eaba7ea
SSDEEP 49152:CDdjtnl8zPic00D33z2N+1VCxfOuUhAqDlR:CDFQH3qkCfO3DT
TLSH
T179A533D650840172D31F63ADE8DAABFAC16BED2A60BF1BE58CD34247DF14385C161326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92

File Explorer

20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92.zip

.zip 2.1MB
20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92

.dll 5.0MB

20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92.zip

SHA256 8fb61486f47e86e86e20c426292579a6583f13c7207354ee202880069dd8706e
MD5 2c758d8f17936e8363a1109667bfef6d
SHA1 4a26aaab13e0604ff5d07444ed17d8a5a153ef8d
SHA512 27cc002482a2e46ac6a0b6ed54c0b10c288c889c7f964309461b18f7df4767776d588bb9638c55d762c8e9f2edd32677a34ec256ca3a9473a911d7ba4eaba7ea
SSDEEP 49152:CDdjtnl8zPic00D33z2N+1VCxfOuUhAqDlR:CDFQH3qkCfO3DT
TLSH
T179A533D650840172D31F63ADE8DAABFAC16BED2A60BF1BE58CD34247DF14385C161326
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92

IMPHASH 2e5708ae5fed0403e8117c645fb23e5b
SHA256 20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92
MD5 8d2756432884cecd4ddefa96e73c10a1
SHA1 bae447045b50339780ba1d100df4dab5927d58d0
SHA512 29323be1398d3ec11fdd5f9a86f5aa8feea862b62f13dc0269579136c5b582e72eecfeaac1ccce6e95a7f84a6b82169a3fbcf5309d0ef66697387a30a9b498e0
SSDEEP 49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:+DqPoBhz1aRxcSUDk36SA
TLSH
T1B436F601D2E51AA0DAF25FF7267ADB10833A6E45895BA66E1221500F0C77F1CDDE6F2C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

4585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92.zip

20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92

kernel32

msvcrt

generic

Sharing

General

Malware Config

Signatures

File Explorer

20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92.zip

20a4b8bb2191e6c95c01473e9d36affe2d293f1ee56839b4a64a5a21e8157a92

kernel32

msvcrt

generic