Malware[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Malware.zip
Size

1.5MB
MD5

66c56c6583a5112e0cd3508e324c9a96
SHA1

13597b56c2e9bfdd673f936e05907d7fff847098
SHA256

c46416b30798196340a2ca35d58f166ce8c3f8eb4ad2e5e8a29f7813743b7a91
SHA512

7c15214123633a7854e527c8a8451a90a687c7b7761cd191d8592228c15eb1e0d27ebd4ed03240501cb567e1e137eaebcf3dc00510b1f9ad39a543f0dc8bcf3e
SSDEEP

3072:b2JPXi+wS6z84T5NCatPK/z6D6WIaplNj8dMwWmmrezFibmOG1xok6xmfwchTDmi:swSat7Caqz6DZIJMepibmOaox5ccBI1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Canon_Library.com

Files

Malware.zip
.zip
Canon_Library.com
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ