ezLGJLXuftPIrq7[.]zip | Triage

Sharing

General

Target

ezLGJLXuftPIrq7.zip
Size

584KB
MD5

e4a193e229807fc9e9e28d928f1a63c9
SHA1

014d69c8d6bfc4c7f74ed8c137d3cbcad338b444
SHA256

a486562b0d8c6aa23eb81a203a435824e9eb7ca33a5adf18d521f87504dd39d8
SHA512

d3a031fcc8222c37ff0815681bb65c055715101019a8dc32b2c5149d74b395d042f96f7304ec475b5dbaa89e3928884bd1916b13d4b5ff4c88ddcc7eb2c21c4b
SSDEEP

12288:dQJWEgNJQslfxIExwu1matt/wKdbYK9OfePCp+qcqSlU3gUn:mWLDlDwu1mattFbYK9qkhqSg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ezLGJLXuftPIrq7.exe

Files

ezLGJLXuftPIrq7.zip
.zip
ezLGJLXuftPIrq7.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ