9150034563[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9150034563.zip
Size

424KB
MD5

3edf4bb0833d12a16ed5327ca0cf5a4a
SHA1

87f6984537fdf8f81b8640cec06f3c39fa7b3b3a
SHA256

9869fc6f32b7aac1b382d5217a4be703c6e99635d85b2de1eb40e56ae9d7cc9f
SHA512

169d0e98c75cf234bddd52c80004afb57c9d76b8c68c1075c4384e6d5ce8a9996f4bff92139019264b023ccd5f080afc8dabcc1fffb3f1c43d6b579dc161fdb9
SSDEEP

12288:98DH9sXug+0GRjj7ZKlSa3sn7f2W6BdN54lUMlHgilj:FJ+0GRLN655H0tj

Score

1^/10

Malware Config

Signatures

Files

9150034563.zip
.zip

Password: infected
1e3fa3f813abd850f49e38154337442d6d3f3bab1b76b339a3e4b45c5897e956
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ