e8bfedb37992f6b73a61fc89d2048f59[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8bfedb37992f6b73a61fc89d2048f59.zip
Size

1.6MB
MD5

3107781ac977fb1702752409db36c677
SHA1

071dc4bc5c87b97ee38686682122495c9dc73cdb
SHA256

cdbc50dfa2f15a193690cff83552162da3f720b1e3a19452631de83a993677fd
SHA512

7aa468e2d1ab5a1df2e1f4633a94e7007bec00aef82a34abaf5c93c736b5d73c9f4bec9a5032c41fafb9b98fe8f726fe992f7e1c201750acdf9e1a4337282fed
SSDEEP

12288:h32AVhEzwnrOUOwLBWlazHq5K44UTgnqFg3p5JIc30:h3XVapqBbH2JGKg3p5j0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e8bfedb37992f6b73a61fc89d2048f59

Files

e8bfedb37992f6b73a61fc89d2048f59.zip
.zip
e8bfedb37992f6b73a61fc89d2048f59
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ