0x0003000000000733-166[.]zip | Triage

Sharing

General

Target

0x0003000000000733-166.zip
Size

12KB
MD5

75aa669a888e4a2e902b85e433aa2003
SHA1

ca6392069d6345eac90e91fb6d686141a9203a63
SHA256

6629fd327706ece79f824a2963e1c86b83ba9c51e5e2ed6aed63a203ebba2d32
SHA512

b19bdf1d68f72feef6977a02181b98e3ec2e3d34384443c635e8608d9bf00b6c68f277a9d2dc659f2dc8366c39549ec9b3e2e07bb657470624dcc3289548ca1b
SSDEEP

192:fV5FVwNkyNQzL3qpCh98w+H33vyiZ/Jui99MhpNZkQNXemJKn3HrpvBCUvr5+RFm:bwGAQ/t2p3f1/0i9ShVRgmiFvvr5Um

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0x0003000000000733-166/Sample.exe
unpack001/0x0003000000000733-166/temp.exe

Files

0x0003000000000733-166.zip
.zip

Password: infected
0x0003000000000733-166/Sample.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
0x0003000000000733-166/temp.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ