Pre-alert M160-450278703[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Pre-alert M160-450278703.zip
Size

575KB
MD5

5f5d9f5a9bc37bacfa083866377f76aa
SHA1

03ea65ebf017341ad47ba04c977d0bc300ae1452
SHA256

902b2a35e3713b03bb47346f12696a4faffed33a7229dfc16b1ee5c66babcfbd
SHA512

f2284df2e08de83070585d52fb2c3f4a941e1028137c83307b363f9fd0d4c7170d8fbb46157662283c0063722c98c9ec199e7d73c6a02fee2288bba4509bf18b
SSDEEP

12288:j5DuSeJJa/cw1SUwlByzWUpwAlj0OYWoZX:jtuS+4RwlByKGwAieiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pre-alert M160-450278703.exe

Files

Pre-alert M160-450278703.zip
.zip
Pre-alert M160-450278703.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ