PI_1304021 (2)[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PI_1304021 (2).zip
Size

599KB
MD5

45db53e7d63494df607f222711a5835f
SHA1

6aed420a7d4839a84e9879356a8778bfaf5841a1
SHA256

334b2750481ba0b937164bd3c3c111b1a9cd76c1c16a7ee0571e7da6647e7e25
SHA512

097e5fca5f1bc6a866c98e65547f59512f5697b2024dfb2786c5e385566a5767f51eed170bce4bcde510a0289b880db73e4ab8569053de5768ab84ecf5f3ed05
SSDEEP

12288:sgYVgf1hyA+KIqUNXpqHYg2A7EBCuupRBLqQMSQdkFIctHGc7lfnGpzD9yBw3:sFg1Mhn5q4gfKEQuIapQzD9yBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PI_1304021.exe

Files

PI_1304021 (2).zip
.zip
PI_1304021.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ