3a4d5011b0eddb6dab44298efc9bc063[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a4d5011b0eddb6dab44298efc9bc063.zip
Size

537KB
MD5

4f496343575d823704ce860aed0a1c0a
SHA1

15441fc9f0d78763a27cc20b0dee0f7c7e15e252
SHA256

86401cc4388769aa784a63c518240e2d9c46402d0f9b31d4b3871e326733ed61
SHA512

c51b7030598e5483d9b8b7e1483202381934d70610fb46dc019bc4a9fabaa597d6ed982d32e179bf7015c6d9b2871917c5803c47975bdeaec3c43b28fe9ecf2f
SSDEEP

12288:sakAft2ebUBJ/OsurAMUnO6LANJktQFEtQDxYITr/rO8w:szGwRJ/JucjnzLANJnD6o1w

Score

1^/10

Malware Config

Signatures

Files

3a4d5011b0eddb6dab44298efc9bc063.zip
.zip

Password: infected
3a4d5011b0eddb6dab44298efc9bc063
.rar

Password: infected
Swift payment.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ