-Certificate of analysis[.]zip | Triage

Sharing

General

Target

-Certificate of analysis.zip
Size

532KB
MD5

867cae014bc41d658fbf6264d1e00c93
SHA1

c532ee034aa5c9a53224beafba7c99769e83c072
SHA256

41d5891380ba5900b931d127c6c70247b5976b44f68c282efae3c3729bf1b788
SHA512

fd81881c8265ac542e8ec16fcec3dd1c184bc57ef691333ad40e58871e5f605d45b6d24b89bea99e90d7461d79280b8800dbe078c45975fc6a00806937cdc33a
SSDEEP

12288:0jgYYvHyghA11JJF5TPZXScQHzkLz3UHquvBD3:0cjH7m1J5TPcdTEzkHlx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/-Certificate of analysis.exe

Files

-Certificate of analysis.zip
.zip
-Certificate of analysis.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 596KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ