11118064144[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11118064144.zip
Size

320KB
MD5

9712a2e99039077af7fb48cd74359c50
SHA1

c5d863af4bc952e2fe6f3c3b4828d5453911387f
SHA256

5889949565153156543b6ac19cfe952a359326b7f19aa15bbfbcf215383e2cdb
SHA512

7228ab4358adb996119a9465bf6c6386d38b311744e25d2a147c9a29261d625bf04acafdb0fcd8042d5dea6d17d6139bb7cf375cbead43cfef7227d844aed432
SSDEEP

6144:SfB6EhSxjuNcgZPg6KXGnGMWcC+ESXUdqANJHXbJ1z9tJkNyxL:S56EhgqOTprv3PFqANJHXbJ11LL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2a36d1be9330a77f0bc0f7fdc0e903ddd99fcee0b9c93cb69d2f0773f0afd254

Files

11118064144.zip
.zip

Password: infected
2a36d1be9330a77f0bc0f7fdc0e903ddd99fcee0b9c93cb69d2f0773f0afd254
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ