c6e74929d1[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6e74929d1.zip
Size

527KB
MD5

6739564ffa272e42f826b026ee015c66
SHA1

dfc36dbcf9bb471f3610a89c15e3574c47570644
SHA256

af5040de6bc3f7e97bcb4cd1e26ef4acb3fd8ed05bf33d3c6f9ef9bca5dcdfd0
SHA512

527dbc2c9b6482a234365c2d3f17e13fe7519a054647cdfb5c0da7c238b5c315414f50a500eca9f977754c58e799e5e9bed2786595ebf7ad5d2e2ececb7db953
SSDEEP

12288:F1TjjqFyOHqw/3Ww0ZyAjNrvEYFIvGbyc:iyGqwfIbjNYY2C/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c6e74929d1.exe

Files

c6e74929d1.zip
.zip

Password: infected
c6e74929d1.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ