ПО[.]zip | Triage

Resubmissions

Sharing

Copy URL Twitter E-mail

General

Target

ПО.zip
Size

40KB
MD5

92411b821a0e0ab0579984b56dbcbf31
SHA1

6df93a67793908f15b3213d99a3f277260fb6178
SHA256

f1116a0709e511ae2f07657bdcab4ccf66b24ac18580fce94957d22703871c31
SHA512

30a3d96aabd291b092eb98b20ec72d91cc0a959d084b1ffde238b21f733e3a14e05f6f4819940b78aaedc3a64840897836c4e0e2cd768fec9dc9072562930d8b
SSDEEP

768:+YcbEpIKtBU88CPS2eJNie4UD1INxpaGHEr/fmBF1N3sQM1:dcbEpZtBo4INxX4pZHEr/uhI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ResXMLGen.exe

Files

ПО.zip
.zip
ResXMLGen.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ResXMLGen.exe.config
db.mdb
⥬ ॡ.txt