a1324743ab93398f3d9cef842890e2f11d003aea751b4ee9bc6c4cc87899d113 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1324743ab93398f3d9cef842890e2f11d003aea751b4ee9bc6c4cc87899d113
Size

1.1MB
MD5

bcc78737d4c6cf6ce9489e74c76631b2
SHA1

a6139efea4df791892bbaf8eac246617d4ea1b76
SHA256

a1324743ab93398f3d9cef842890e2f11d003aea751b4ee9bc6c4cc87899d113
SHA512

1b19c2c4270613c5e9acf16981cf94121c00f6761f3a9f853142f273de04eb64523aabdd48fa742c9f4fd7c0ed47c0e97439b422cf683f349b481e83b6c0ea6f
SSDEEP

24576:DkUZb3kUZbnkUZbmbibQUv2gVbAdqkKZjb:39b9r98i8PgNVb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/IMMORTAL/jamzwcff.exe

Files

a1324743ab93398f3d9cef842890e2f11d003aea751b4ee9bc6c4cc87899d113
.zip
IMMORTAL/jamzwcff.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 948KB - Virtual size: 947KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMMORTAL/説明書.txt