230417-v793dsfd36_pw_infected[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

230417-v793dsfd36_pw_infected.zip
Size

495KB
MD5

3a018f2da7771d4c6f062d6cc339343f
SHA1

1531bdb7a9ed4d81c452f7dba8f9b3af943472b6
SHA256

f8cf2da21b6378dc48bb63f8744d88301a59e069f51b8103f015a0707ff30ee5
SHA512

ab0318a12d8ad98e917e9ffd46025fc57f461c675cc5ecd91f72a0d2825987fcab87634f13daeb0d9753eeeace25f4a89583cd4fca1db3b44370f4e78e35c8e1
SSDEEP

12288:0qdEBftrLlWinjfaUofGsJICJppSGQ/HgJqUQJ9SPsPK:eBFrLl7adfGaJppDQ4gUQuP

Score

1^/10

Malware Config

Signatures

Files

230417-v793dsfd36_pw_infected.zip
.zip

Password: infected
import docs.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 558KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ