ZLocal[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZLocal.zip
Size

63KB
MD5

f24bc1181cb53771b61e61049835371e
SHA1

519da99f1cce95741828513c641962bcfb609d6c
SHA256

970e5939689f2d5214fa4afa4f2988279b24645f1b2b46361ae8fa6005950372
SHA512

79bbc1fb9b690f1cc89f228f48489a4e953738f966a7ffe773241426155b784c6c19a3fe9478393478fa915877154a42d2ba28e972c481a151e1f69e3946357e
SSDEEP

1536:2SKWQks6iZeOHuf5Uyycq9moRILOxirrh3/L2RYdJf7a8:2SKeIZGhNyL9moRbiF/LIY3f/

Score

N/A

Malware Config

Signatures

Files

ZLocal.zip
.zip
ZLocal
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ