1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1[.]zip

General

Target
1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1.zip
Size 2.1MB
Sample261107-l7k9laee92
SHA256 ad7f1da5e7edb01d345d6c97d9d2d6b5e70ef0c1d401e4c2fc0d4faef1437846
MD5 2483b89a738e413822feaf4098585661
SHA1 1b6fb2a35fa2c7db94660447e98e177a78a21c94
SHA512 43109eab4920d7afd13d7dcf814cd341461b625939d54bdf305577a5feae879015834ba07df60b90fafccd4a8609ecfeb9316f9da3a1d621dee27b6b779365f8
SSDEEP 49152:dkvshHjYKWLcuvMm15sNJrMYdLsT21JzcdZ9ZbSuT5/ctyljF:dk0hHXWLNHsNVMcB1JodZ9ZVd/Tp
TLSH
T1F1A533B1684B183A90D93363AD6438CD6EE14294FF5B9CCB0FAC625326EFB9D4750D06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1

File Explorer

1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1.zip

.zip 2.1MB
1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1

.dll 5.0MB

1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1.zip

SHA256 ad7f1da5e7edb01d345d6c97d9d2d6b5e70ef0c1d401e4c2fc0d4faef1437846
MD5 2483b89a738e413822feaf4098585661
SHA1 1b6fb2a35fa2c7db94660447e98e177a78a21c94
SHA512 43109eab4920d7afd13d7dcf814cd341461b625939d54bdf305577a5feae879015834ba07df60b90fafccd4a8609ecfeb9316f9da3a1d621dee27b6b779365f8
SSDEEP 49152:dkvshHjYKWLcuvMm15sNJrMYdLsT21JzcdZ9ZbSuT5/ctyljF:dk0hHXWLNHsNVMcB1JodZ9ZVd/Tp
TLSH
T1F1A533B1684B183A90D93363AD6438CD6EE14294FF5B9CCB0FAC625326EFB9D4750D06
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1

IMPHASH 2e5708ae5fed0403e8117c645fb23e5b
SHA256 1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1
MD5 bfb78d9fab107cc26b854ac8ba7ae10b
SHA1 555c14154cd7ba067805e695e024c83ae880d0f2
SHA512 e6c401c479d748a64b0794a56759c607662317b1e04a45d9be1255362d0728d81e4dc58d2ffb5b793e55804739019f5dec638e99381bec4763e9c6e1cd1207c3
SSDEEP 49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA6v6:+DqPoBhz1aRxcSUDk36SAv
TLSH
T17A36BF00DBE41B60D2F25FB679B797006776BE158A6B925E2650600E1C73F1CCDA2B3E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

4585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1.zip

1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1

kernel32

msvcrt

generic

Sharing

General

Malware Config

Signatures

File Explorer

1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1.zip

1cfb94930b9c7a8e7533dcbf76734becf9e4b9cd8124b2aaca67ae1ef32364e1

kernel32

msvcrt

generic