0284e71c4565afe4301083a770a37bb0-sample[.]zip | Triage

Resubmissions

01/05/2023, 20:37

230501-zebrcagf59 5

01/05/2023, 19:19

230501-x1zdesfd34 7

01/05/2023, 18:54

230501-xkc59aga9x 7

01/05/2023, 18:25

230501-w2v7qaed8x 7

Sharing

Copy URL Twitter E-mail

General

Target

0284e71c4565afe4301083a770a37bb0-sample.zip
Size

584KB
MD5

6aef8b055b3a4f80d79cfc5735dfd9bc
SHA1

d6cce28f0a13523c6bb8f04edaa6a3f94665e7ce
SHA256

2d702e7b1407c101c50d7cb14a97147e809b0e3b080af9b0e061bbaf7b88099d
SHA512

00e0c95067a4f02fcd3d65d6c5a7cf8315becb41e7a399d87bf056cb159300cb44213f51e255ad7ad535093aeaa1fed8f130e85e758dcee0c1b26dfb8c661bb4
SSDEEP

12288:XA2SMwqhVSWFDsNtpp+EA6jirbanfiLmzaBlJFzD/DzSnj9IA4ZLHW8mHqb30SUC:5S0VVFQ3ppOaST/7DiJx4ZL2hekSgo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DBS.exe

Files

0284e71c4565afe4301083a770a37bb0-sample.zip
.zip

Password: infected
DBS.IMG
.iso

Password: infected
DBS.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ