Transfer - NCN[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Transfer - NCN.zip
Size

655KB
MD5

6716a730821d7cd810421bab2f2f8c25
SHA1

d1e98a30f0bc2170f1ca30180957bdfea1195154
SHA256

85ab6ac1e244368aeeb08e4a9204aa60afe0eb185793d7dcb7712f6836c76885
SHA512

81c29d94bfa82d0ffb4848e5b9f2205e1699959860b0c79b756a7af183893a319f7d10c54d4b779295fae080a0f8fa530999fe2ebaf220b1ddec225bcb5decde
SSDEEP

12288:57B88sZjbTGC+914KV5rzcGVlNuPg+VY6HUfj/XzryI3k4Z4nIQGgZ9niO4FC3mW:TstGC+B/rzBlx+u6HUr/Xfi4AI1gZFXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Transfer - NCN.exe

Files

Transfer - NCN.zip
.zip
Transfer - NCN.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ