file_507e6a3184584673ac43f77121ae51d4_2023-05-18_12_27_22_059000[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file_507e6a3184584673ac43f77121ae51d4_2023-05-18_12_27_22_059000.zip
Size

306KB
MD5

fa44269b9d5322a72a87471381e761c6
SHA1

7d7e5902daff20424ba66bc46ce9737a20a60bd7
SHA256

fac61f0b040d3763914f9596c50f46d94389cf733190fdf12c28d85f176e58ac
SHA512

e3d67f1a37dc75105ee9fcc423b02964c2265a74c46991019f14c06cdff39afd6d56b10193592e64b0f1d6605311d8fabc29d35d343a86e79d3f37855adbe693
SSDEEP

6144:iJD0DbqiGJEoIlgDY45Nzh5NGVZVJlrv3QRSZpRtM9i8QTVP:iJku32owg9Xkxna9PQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/entry_1_0/autochk.exe

Files

file_507e6a3184584673ac43f77121ae51d4_2023-05-18_12_27_22_059000.zip
.zip
entry_1_0/autochk.exe
.exe windows x86

c9d188b5a628784170681ce972829364

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtReadFile
NtClose
NtOpenProcessToken
LdrLoadDll
NtTerminateProcess
NtAdjustPrivilegesToken
NtDeleteFile
NtCreateFile
NtQueryInformationToken
NtSetSecurityObject
NtSetValueKey
NtDelayExecution
RtlInitUnicodeString
NtQuerySecurityObject
NtSetInformationFile
NtWriteFile
RtlQueryEnvironmentVariable_U
NtCreateKey
NtDisplayString
wcscpy
RtlUnwind

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 124B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
manifest.json