zero[.]exe | Triage

Resubmissions

10-06-2023 20:48

230610-zlyjpage81 8

10-06-2023 20:47

230610-zk964age8z 6

Sharing

General

Target

zero.exe
Size

398KB
MD5

bd0a3c308a6d3372817a474b7c653097
SHA1

5ed36132872be3d5d94627b89f15a7369f68fba1
SHA256

d4c62215df74753371db33a19a69fccdc4b375c893a4b7f8b30172710fbd4cfa
SHA512

86c53974da682c9e55a181cacc3ba19a9bfd8df488c536c175695f28f79bb586722f4d6b061aaceb9d0db91996dd0a7e288f413c7d2562fbc5b6a305f747368f
SSDEEP

6144:tYcn3ge+gqzsSALff2TRLz1lTl8TFPUW+8sSZJMidVmXmVcXHU:ttQe+PzsfX2Tpz1daaWnVIgcE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zero.exe

Files

zero.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ