261029-zmhjvsfvsv_pw_infected.zip
- SHA256 f6933a16a3f4663a276d62e06c277be27ea82b89b59e12e476b42d15848d0caa
Password
infected
Static task
static1
1 signatures
General
- Target 261029-zmhjvsfvsv_pw_infected.zip
- Size 46KB
- Sample261030-sw7f1set9m
- SHA256 f6933a16a3f4663a276d62e06c277be27ea82b89b59e12e476b42d15848d0caa
- MD5 2ee41ff3fef4eee4cf3727563c682fd3
- SHA1 d3016b822ab775057ade390288d73e6c8ad383c7
- SHA512 9b17446edf749988f0f3e357df90d6cdec1cba02e5a68e3494db7c74cacd8886be1c4c9a31376a25d93b2d7bf614f3c23580a2f72b41725b881a0fb414b93dac
- SSDEEP 768:Hn0OX+ZuKaMK1rm3R6tWWxhoJn6iODOQIesV2hKYxgr17oIhaBp0ReI6hU:U9Iz6sWKnqx5V3x7cByReIL
- TLSH T18523F19790C10EAF80771AF7DF6922521DC4BB546EA0D658B2711CF06B3006F1DA67BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e066c6a728ac92d261c1abff7bfce1ad5ebd8b1ef054974431221629ac30d221
File Explorer
-
261029-zmhjvsfvsv_pw_infected.zip.zip 46KB
-
e066c6a728ac92d261c1abff7bfce1ad5ebd8b1ef054974431221629ac30d221.dll 148KB
e066c6a728ac92d261c1abff7bfce1ad5ebd8b1ef054974431221629ac30d221
- IMPHASH 8de9923256868ac58a3fbb5f53edd9da
- SHA256 e066c6a728ac92d261c1abff7bfce1ad5ebd8b1ef054974431221629ac30d221
- MD5 55eab3cfdf75e78328f57ba9defd33a1
- SHA1 17e8639a00bb32b10cb9cf0d292e9441456ce4bb
- SHA512 710d447837ae048d7f38ec99cecea562d6ecd530f9f4405e30b5c745d5b58cae957ac8bcb5a05374bfa4bad1cd7a037143bcca81ec118f90c3c00b22051e9d46
- SSDEEP 1536:5/CPVEC1LfxFARpm2xyeb7a5KPpj0frp6cKz6XCt93QPkZwSnBPIQgjmqNvSXaAC:
- TLSH T1F2E31FA239C972E6FA7672398069C4D692C39AD0E7157385788CF7C176243F60807BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
Sleep
ole32
CoCreateInstance
CoInitialize
CoUninitialize
DWriteCreateFactory
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
140KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
308B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ