mkpub_INVOIVES 6620951473302[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mkpub_INVOIVES 6620951473302.zip
Size

2KB
MD5

a62b64a6a2717822adeae3cea46a7007
SHA1

b7b614db77bea7fbde03947df7a7b29e300ca1ef
SHA256

ef37e5fa90a49180ee3e56a26c0380612449b04680c5fc470d13b5e4bf58efcd
SHA512

113e9560e5fbd2be6574a2b1debe134397a0669552846efdb58defe23281e38113e2e0c1eb3c33f6691e2441c1af76ed97500bff2170248005525e1c3d35a7ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INVOIVES 6620951473302.exe

Files

mkpub_INVOIVES 6620951473302.zip
.zip

Password: infected
INVOIVES 6620951473302.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ