Salescontractpo[.]bin[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Salescontractpo.bin.zip
Size

5KB
MD5

d903cfcc85f45ae880962b5b5a8a10f1
SHA1

d81a533a9982a9c1ee78430c291bb39ebe2a5424
SHA256

40bda3fa8b55af04f5bb07b1989d78dc5b59336895820c7bac55c17f0d5d0028
SHA512

8cb18d8caeb2b083dcf95d47dbc827b262072dd65db99fea624be77d57ae05c959a32f73c317609fcbbea204909a44792b6cc2fabf58e3de81678627c856f7a2
SSDEEP

96:xnm1euq2bJ++g5qYmhM3FCl1F8b8wPCVq4vHStWzM756mIQ4/bbn3ZuvnGe3RO0M:geuBg7qYWCFCl1sCqWjnDD3ZVCMvl

Score

N/A

Malware Config

Signatures

Files

Salescontractpo.bin.zip
.zip

Password: infected
Salescontractpo.bin
.exe windows x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ