List[.]7z[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

List.7z.zip
Size

334KB
MD5

515b0856f95eec62c74c0111f7375802
SHA1

2467a6b68dc71d6cfc9e37635496d0a454b79d97
SHA256

d610e33bc733a3abb06840eb21cae8c4863f812fcb6c9d9ca509d0991b7a9ef1
SHA512

c798c7c5d1ea1a5de2166e477b1ae0c2c1faee7d388d60f4f9653a5748f278f96ef19411c9cc18e2f4442bc0bb732b75c9dc25179302532f4f6b932140ba81bc
SSDEEP

6144:wLMCirrNWmu0a07gb2S7QO9OkdaGeKTT7s/82j7VZMiFLTpfFteoKI48xW37dv0:ljOy7ktQy9dbTu7Q6NFUoVxWB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/List.exe

Files

List.7z.zip
.zip
List.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ