payload | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payload
Size

1.5MB
MD5

e108c3a447a9b5f13f760b34138de809
SHA1

1181c65c65786a48e9b54df79748ce1875be1d76
SHA256

7eda4aab27c49700a9e030a0f6f92894e522a6455811fc685ba1e2a20c64b517
SHA512

c3603d4a750700324cb4fc561ad67fb4a11d3e902b34ddb7d059811c9388453a549d5232194040691670e6bf88484465cbe686302b305ae6e6a60e6857327c6e
SSDEEP

49152:F4F7lcEcOqpEgPZUKjIHZCkcFapiVUAEjl:F4DcEcfEgR9gZCGQQjl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/payload

Files

payload
.zip
payload
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 523KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ