samples[.]zip | Triage

Sharing

General

Target

samples.zip
Size

137KB
MD5

ce358dd41dc369243e2d5f9286b2b072
SHA1

a85ec4d699e935d45ea010cc4c7a024b44b41e06
SHA256

264b7736fb9c82d8815154a8d1c40b331913960f4042fcdfa8c6faacd696290d
SHA512

c19809c89f975d6c926c8620a69aa66139c8f557c2841889242be2865ebb1e286972fb3e88f7a8a4aefbeb37835a4a111748731cd2fcfe4474e49415939a04cc
SSDEEP

3072:WpNuTLiL0LYdeYDFswxxA/YbLMzPs+IiKrr+KzAzpA68GC:EuqI5YxQwU4+IdrTUpA68GC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/820d1a0519cc8cf8f536aad5f46f1f6ac6cba283695d285c7af8091d5034aa8d

Files

samples.zip
.zip

Password: infected
820d1a0519cc8cf8f536aad5f46f1f6ac6cba283695d285c7af8091d5034aa8d
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ