153a2e979ea7c6992f11f5636fe3af50[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

153a2e979ea7c6992f11f5636fe3af50.zip
Size

2.0MB
MD5

0a904271ce5ff119c0eaccdf47268d32
SHA1

cb1b22b7c118fff52ffc8cc94892c2d3c7e83d10
SHA256

a34403253fbfbecab972a391bafabdcf84f4e4736d6de4a568fe0049fde7dcda
SHA512

8ca5953298e302bd9f6c3353762251b97d0447ece565ab20863090b48c38f1d79715d04ba624c4a23db6b4fbe1d596a6926972df0972909eab9a7506a6b0a628
SSDEEP

24576:u1UZaQ3FtR4s77kB3fkxze95LmxwIKIx245U7hx:W5IFP77CfqmmRKyC/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/153a2e979ea7c6992f11f5636fe3af50

Files

153a2e979ea7c6992f11f5636fe3af50.zip
.zip
153a2e979ea7c6992f11f5636fe3af50
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1004KB - Virtual size: 1003KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ