malw[.]zip | Triage

Resubmissions

23/02/2023, 10:10

230223-l7qt3shc9y 5

Sharing

Copy URL Twitter E-mail

General

Target

malw.zip
Size

446KB
MD5

a4379dc122b1ab115802b32ba8a26a2f
SHA1

e6b302a9afc2b9f14a0664522b847467e6e38583
SHA256

b29297c2650346d7d9cf43de7e5e8b2d70be1fcb1e95b81c26c63fa653a5d137
SHA512

25a1d15b928cbdb9bcfaea1c7b26ecc4dc947ea72fab71f88d954df75669da76a48123dd984b4900c9fd2435c997f86c7a22d6cf3e9399b864305328d9f68992
SSDEEP

12288:XYJANtEiuy9iq1Z0S0tUMpPpsWG8Jtmzx:FNtDuuZkS0tUiPCWGv

Score

1^/10

Malware Config

Signatures

Files

malw.zip
.zip

Password: infected
83ada3657f8de4c374b08b5fa8e573425f22ae3759eb7ac22645014ce7ed9ebb
.exe windows x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ