soft[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

soft.zip
Size

275KB
MD5

85cc3f1e1f07e78ea8734f3d55daf0b0
SHA1

b57ba355efebc12c9ab9ca16e94de5afae365512
SHA256

42b51c402cea220d24dc86055653ca7cc976186f87797c577fa993c6892528c1
SHA512

7714d754f718948ca1c4ffd2f2156854bbcdc8bde4f933a290c0e84dbcc3b4ecf0ff92853366f47e31752262342281a46f6b7e692d87cd41c98aaf030adc52a7
SSDEEP

3072:i7pz5mdlnuTdwcDu11P5I6QIUO3rKF08fEiuH+4dxt7b5EAubakdvZymBWA8y+CL:wpTlWP591UEFXHq1bLd4T8+3h4Mk97Pf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup.exe

Files

soft.zip
.zip
setup.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ