230414-n5lhpabb5w_pw_infected[.]zip | Triage

Resubmissions

14/04/2023, 15:33

230414-szn4vaca3w 3

14/04/2023, 15:20

230414-sq37eabh8x 3

14/04/2023, 14:39

230414-r1dttsbg5s 6

Sharing

Copy URL Twitter E-mail

General

Target

230414-n5lhpabb5w_pw_infected.zip
Size

5KB
MD5

525f5b12c296807a99a9f2352196a472
SHA1

672cb6cb1ceeaf4ddc99ca6314008dd13ad53bef
SHA256

78039d07c39329bb21f6e8af19be40419b98e2fd0f5c3c57be90251ef8619081
SHA512

e8ccfc974afb4ff1d5a01443f5d221d07d99a0667b14d6522e6ec1ae3419e697554d5a963bb1e7b720417d303f12d6981c18257494aa73949a478dd29dddcd5c
SSDEEP

96:638Ibm/AxupScEQfh+NBpAb2aLZfeHJTUi/tgtaFvQo1MVwI1z5dkzx1rohNC0:C8Ib+AMOohxb2MJgJIoggBQ2Gz5dqx1Q

Score

1^/10

Malware Config

Signatures

Files

230414-n5lhpabb5w_pw_infected.zip
.zip

Password: infected
Policy_Update.7z
.7z

Password: infected
Policy_Update.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ