ZipCosdaz[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZipCosdaz.zip
Size

423KB
MD5

f1b2524250e1382d5ceab891ed6bccdc
SHA1

ee6af0016033f7ef5c07e1c44427eba992dfa1f3
SHA256

59676cac2f9b4ff2029b98a29045211fe58a40409424e256212c2cbfe6ce0b3d
SHA512

570b08131be089c03147beeb45ff3216f7535525688445bc25a9456afd893981da4f601c394cc327ad256722888918a788613f15e5151e120a671247273e134f
SSDEEP

384:t9zZDntfOJ/Fmu+S7O3frccEF5kgFLvvaQn1wkk6nfPZsBQ/UJ4FWp6f/ReAbvV6:t9BcJt4S76f4F5LLnaQzk6p/dbvVB56

Score

N/A

Malware Config

Signatures

Files

ZipCosdaz.zip
.zip
ZipCosdaz.exe(1)
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400.0MB - Virtual size: 400.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ